Lead Strategic Services Consultant – Application Security

🕒 August 18

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

💵 $123.5k - $185k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Black Duck

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

🔒 Cybersecurity

☁️ SaaS

📋 Compliance

Cybersecurity • SaaS • Compliance

Black Duck is a leader in application security testing and software composition analysis. Now part of Synopsys Software Integrity Group, it offers a unified SaaS platform optimized for DevSecOps. Their solutions enable businesses to automate security testing across the entire software development life cycle, manage open source licenses and compliance, and secure the software supply chain. Recognized as a leader by Gartner and Forrester, Black Duck provides a range of services including static, dynamic, and interactive application security testing, as well as open source audits and risk management solutions.

📋 Description

• Assist customers with application security testing (AST) tool configurations in their pipeline through creation of templates and confirmation of configurations. • Provide customers triage support for AST findings from their pipeline testing. • Lead AppSec Program maturity assessments using frameworks such as BSIMM and SSDF, including stakeholder interviews, evidence collection, and scoring. • Develop Strategic Roadmaps defining the client’s target state, 12–36-month roadmap, resource requirements, and success metrics. • Facilitate workshops with executive, engineering, and AppSec leadership to prioritize initiatives and align with organizational risk and compliance goals. • Deliver strategic presentations and recommendations to CISOs, CTOs, and software leadership teams. • Contribute to internal frameworks, templates, and accelerators, including AppSec Program Roadmap IP, maturity scoring tools, and reporting dashboards. • Contribute to thought leadership through press commentary, webinars, or conference presentations on secure software governance and maturity advancement. • Deliver hands-on DevSecOps and CI/CD operations assistance, AppSec Program Roadmap plans and assessments, framework reports and presentations, capability maturity and roadmap visuals, and executive-level engagement summaries and strategic recommendations.

🎯 Requirements

• US Citizenship or Green Card with 3 years of US residency and ability to pass a background check. • 5–8+ years of experience in application security, software assurance, or product security consulting. • Application Security and Vulnerability Management skills. • Experience with GitLab CI/CD, Python, AWS, and Grafana. • Working knowledge of BSIMM, NIST SSDF, or OWASP SAMM frameworks. • Proven experience developing or executing maturity models, capability assessments, or multi-year roadmaps for AppSec, Product Security, or DevSecOps programs. • Excellent client-facing communication, facilitation, and presentation skills. • Ability to synthesize technical findings into executive-level narratives and actionable plans. • Preferred: consulting experience with a Big Four, boutique AppSec consultancy, or internal software security governance team. • Preferred: experience in software supply chain risk management, AI/ML assurance, or DevSecOps pipeline design. • Preferred: experience developing software and functioning within secure development lifecycles. • Preferred: industry certifications such as CEH, CISSP, or CISM.