Senior Security Consultant - Northwest region

📋 Description

• Run client SAST, DAST, and SCA tools, review outputs and provide recommendations
• Implement integrations for tools into pipelines, ticketing systems, etc.
• Collaborate with developers to provide secure design guidance and remediation strategies
• Familiarity with CI/CD systems (GitHub) and secure tool integration in pipelines
• Strong understanding of web application security principles and best practices
• Manage, maintain and operate application security tooling, including configuration, tuning, and automation

🎯 Requirements

• 3+ years in Application Security; software dev experience preferred
• Experience with multiple SAST/DAST/SCA tools (Checkmarx, Veracode, Synk, Invicti, Semgrep, Blackduck)
• Manual testing tools such as Burp Suite Pro
• Experience integrating tools into development pipelines
• Experience understanding and mitigating application security vulnerabilities
• Experience reviewing code in JavaScript, Python, Java, C++, PHP, or C#
• IDE and CI/CD tools (Azure DevOps, Jenkins, Bamboo)
• Secure SDLC experience remediating vulnerabilities from web app scanning
• IS architecture, security control design, and development experience
• Embraces emerging technologies, including AI tools

🎁 Benefits

• Remote workforce primarily (U.S.-based; travel may be required)
• Medical insurance options: high-coverage employee premium; family options
• Dental insurance: employee coverage; family options
• 12 holidays and Flexible Time Off
• Mobile phone and home internet allowance
• Retirement plan eligibility after open enrollment
• Pet Benefit Option