Senior Application Security Consultant

Kalles Group•Seattle, WA

2d•$110,000 - $140,000•Onsite

About The Position

As a Senior Application Security Consultant, you will help our client strengthen application security by leading comprehensive security assessments across internally developed and third-party applications. Working closely with software engineers, architects, product teams, and security professionals, you will identify security risks early in the development lifecycle and help teams build secure solutions by design. This role blends technical expertise with collaboration and innovation. You will establish and evolve security assessment methodologies, leverage automation and AI-enabled capabilities to improve assessment efficiency, and provide actionable guidance that enables engineering teams to reduce risk while maintaining development velocity. You will also contribute to secure design standards, threat modeling activities, and continuous improvement initiatives that elevate application security across the organization.

Requirements

8+ years of experience in cybersecurity with significant hands-on experience performing application security assessments
Strong understanding of secure software development practices, secure design principles, and vulnerability management
Experience performing threat modeling and secure architecture reviews
Hands-on experience with application security testing technologies including SAST, DAST, SCA, and related security platforms
Experience assessing cloud-native applications running in AWS, Azure, or Google Cloud Platform
Knowledge of APIs, modern application architectures, and secure software development methodologies
Experience developing security standards, assessment methodologies, or security review processes
Strong written and verbal communication skills with the ability to influence engineering and product teams
Ability to prioritize security risk and communicate remediation strategies to both technical and business stakeholders
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience

Nice To Haves

Professional certifications such as CISSP, OSCP, CSSLP, CCSP, CISA, or similar
Experience applying AI or large language model (LLM) technologies to application security workflows
Experience building security automation or AI-assisted assessment capabilities
Experience working within a formal Design Review or Security Architecture review process
Experience with DevSecOps practices, CI/CD security integration, or developer security enablement
Experience mentoring engineers and promoting secure-by-design principles across development organizations

Responsibilities

Perform comprehensive security assessments for internally developed and third-party applications
Partner with engineering, product, and architecture teams to identify security risks during application design and development
Conduct secure design reviews and provide security approval recommendations for new and existing solutions
Develop and enhance standardized security assessment methodologies, frameworks, and best practices
Utilize AI-enabled tools and automation to improve assessment efficiency, threat modeling, compliance validation, and software supply chain analysis
Document assessment findings and deliver practical, risk-based remediation recommendations
Validate remediation efforts and verify that identified security issues have been successfully addressed
Develop reusable secure design patterns and security guidance for engineering teams
Monitor emerging threats, vulnerabilities, and evolving application security practices
Collaborate with cross-functional stakeholders to embed security throughout the software development lifecycle
Contribute to continuous improvement initiatives within the organization's application security program