IT Application Security Consultant

New Wave People • Manhattan, NY

1d • Onsite

About The Position

The Application Security Consultant role is an on-premises position. The consultant will provide specialized security expertise to support product teams, product owners, infrastructure, and cybersecurity leadership. This role strengthens application security across the SDLC and DevOps through assessments, secure architecture reviews, tooling optimization, and operational governance. The consultant will also play a key role in onboarding, configuring, tuning, and monitoring protections across Akamai and Cloudflare WAF platforms, ensuring consistent security coverage across high‐value, cloud‐hosted, and externally facing applications. Additionally, the consultant is expected to perform technical assessments, enabling development teams through tooling and coaching, and helping establish repeatable processes, metrics, and governance.

Requirements

• 5+ years Hands‐on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush).
• 4+ Hands‐on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing).
• Deep understanding of OWASP Top 10, application security principles, secure development practices.
• 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
• Experience analyzing HTTP traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.).
• Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
• Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.

Responsibilities

• Provide specialized security expertise to support product teams, product owners, infrastructure, and cybersecurity leadership.
• Strengthen application security across the SDLC and DevOps through assessments, secure architecture reviews, tooling optimization, and operational governance.
• Onboard, configure, tune, and monitor protections across Akamai and Cloudflare WAF platforms.
• Ensure consistent security coverage across high‐value, cloud‐hosted, and externally facing applications.
• Perform technical assessments.
• Enable development teams through tooling and coaching.
• Help establish repeatable processes, metrics, and governance.
• Perform other reasonably related duties as required.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed