About this role

Lead application security design across web, mobile, and AWS cloud-native systems.
Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk).
Triaging vulnerabilities, and guiding remediation aligned to OWASP Top Ten.
Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3).
Support runtime and application-layer protections.
Partner with release and change management to ensure secure, stable production deployments.
Provide security input in architecture and project planning.

3+ years in application security (offense and defense) with hands-on SAST/SCA experience.
Strong knowledge of OWASP Top Ten and web/API security vulnerabilities and remediation.
Experience securing AWS cloud services and working with cloud security platforms (e.g., Wiz, Prisma Cloud, Orca).
Ability to read and review code in Java, JavaScript/Node.js, or Python for security validation.
Experience with CI/CD pipelines, DevSecOps practices, and secure SDLC integration.
Strong communication skills with ability to influence technical and business stakeholders.
Experience working with change/release management in production environments.

Application Security Consultant

Key skills