Senior Application Security Consultant, Strategic Services

🕒 il y a 7 mois

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Recevoir des emails pour des emplois à distance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

GuidePoint Security

Site WebLinkedInTous les Emplois

201 - 500 employés

🔒 Cybersecurity

Cybersecurity

GuidePoint Security est une entreprise de cybersécurité offrant des services de conseil, d'ingénierie et de gestion pour aider les organisations à sécuriser leurs actifs numériques. La société est spécialisée dans la sécurité des applications, la sécurité du cloud, la protection des données, la sécurité des courriels, le renseignement sur les menaces ainsi que la gestion des identités et des accès. Avec des solutions adaptées à diverses plateformes telles que AWS, Microsoft, Google Cloud et les environnements OT, GuidePoint Security vise à renforcer la résilience en matière de cybersécurité pour les clients des secteurs privé et public. Ils se concentrent sur l'intégration de technologies de sécurité avancées et fournissent leur expertise en évaluation des risques, en conformité et en éducation à la sensibilisation à la sécurité, aidant ainsi les clients à naviguer dans des défis complexes de cybersécurité et à améliorer leur posture de sécurité.

Description

• Deliver Application Security services, including Application Threat Modeling, Application Architecture Reviews, and AppSec/DevSecOps Program Assessments • Communicate with clients and deliver comprehensive reports • Provide remediation guidance and contribute to evolving service offerings in response to emerging threats and client needs

🎯 Exigences

• Willingness to travel up to 10% • Delivering Application Security services, including Application Threat Modeling, Application Architecture Reviews, and AppSec/DevSecOps Program Assessments • Author comprehensive assessment deliverables tailored to both technical and managerial audiences detailing technical execution, deficiencies, business impact, and remediation strategies • Understanding of application security landscape, tools, methodologies, and frameworks such as OWASP SAMM, OWASP DSOMM, NIST SSDF, SLSA, NIST AI RMF, and MITRE ATLAS • Deep understanding of application security issues, mitigation strategies, and common security controls • Ability to analyze and understand complex application architectures • Experience working directly within development teams and integrating security into the SDLC • Assist with Practice development, improving offerings, and mentoring team members • Contribute to marketing initiatives via research, speaking, writing, and tool development • Foster client relationships through support, information, and guidance while managing concurrent client engagements • Demonstrates a startup mentality with a highly driven, high-performance approach to work • Comprehensive hands-on experience using generative AI in automated workflows • Direct hands-on experience in application security service offerings, including application threat modeling, architecture reviews, and AppSec/DevSecOps program assessments • Experience with application security controls, architectures, requirements, and industry standards • Development and/or application architecture design background with understanding of secure implementation practices for cryptography, input validation techniques to prevent injection attacks, and exception management • Operational DevSecOps experience • Development experience in JavaScript, shell, Python, Java, C++, PHP, or C#, with ability to translate security requirements into technical implementations • Excellent writing, communication, and time management skills • Minimum of 6 years of experience in Application Security and/or Software Development, with at least 3 years in Application Security • Minimum of 2 years of experience in consulting services or internal security roles requiring effective communication with both technical teams and executive leadership • Bachelor’s degree in a relevant discipline or equivalent experience

🏖️ Avantages

• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) • Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans • 12 corporate holidays and a Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option