Principal Technical Consultant – Cloud and Application Security

🔥 23 hours ago

🇺🇸 United States – Remote

💵 $250k - $300k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

AHEAD

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🤖 Artificial Intelligence

🏢 Enterprise

💰 $5.7M Venture Round - AHEAD on 2024-05

Consulting • Artificial Intelligence • Enterprise

AHEAD is a technology consulting and systems-integration firm that accelerates digital transformation by engineering integrated solutions across infrastructure, applications, data, and security. The company specializes in AI transformation and AI-enabled infrastructure, data platform and platform/workload modernization, secure and resilient architectures, operational excellence, and managed services including IT lifecycle and procurement (AHEAD Hatch) and hardware integration (AHEAD Foundry). AHEAD delivers end-to-end services from strategy and financial consulting to build and run operations, partners with major cloud and infrastructure vendors (AWS, Google Cloud, Microsoft, Cisco, Dell, VMware, NVIDIA, ServiceNow, Palo Alto Networks, Rubrik, etc. ), and serves enterprise clients across industries such as healthcare, financial services, manufacturing, retail, and public sector.

📋 Description

• Lead strategy, roadmap, design, and planning workshops for small- to medium-sized service engagements • Execute project objectives, requirements gathering, tasks, milestones, status reporting, dependencies, and timelines • Create and finalize project deliverables and peer-review team collateral • Present deliverables to project team members • Support delivery engagements throughout the project lifecycle • Define and operationalize application security delivery plans, including secure SDLC controls, risk-based finding prioritization, developer enablement, metrics, and executive reporting • Lead application security and threat modeling workshops covering secure architecture, abuse cases, application and API risks, and remediation planning • Troubleshoot technical problems and generate solutions • Support business development through client discovery meetings • Represent service offerings during sales cycles, including scoping, proposal development, and client presentations • Lead client discovery and visioning workshops • Identify cross-practice collaboration opportunities and solution sets • Contribute to development, enhancement, and standardization of security service offerings • Own and/or enable multiple service capabilities • Act as a technology thought leader and evangelist • Maintain knowledge of current and future IT trends, technologies, and standards • Mentor team members and security practitioners

🎯 Requirements

• Seasoned expertise in information security, cloud security, application security, DevSecOps, threat management, and related technologies • 5+ years of combined hands-on experience with CNAPP tools (Wiz preferred) • 5+ years of experience working with GCP and cloud-native services • 3+ years of leadership experience • 10+ years consulting experience, or commensurate work experience • Proven experience reviewing and implementing secure cloud reference architectures and landing zones • Experience designing Zero Trust and network segmentation architectures for cloud environments • Strong understanding of multi-cloud governance models, IaC, policy-as-code, tagging standards, and multi-account strategies • Experience operationalizing secure cloud SDLC pipelines • Expertise integrating CNAPP solutions with ServiceNow, CI/CD pipelines, and ticketing/alerting workflows • Experience with SAST, DAST, SCA, ASPM, secrets detection, and code-to-cloud traceability • Experience with cloud identity, IAM, federation, and RBAC across multi-cloud environments • Experience securing managed cloud AI/ML services • Experience leading secure cloud migration projects/programs • Strong knowledge of CIS Benchmarks, NIST, FedRAMP, ISO 27001, and GDPR • Strong understanding of DevSecOps and secure coding best practices • Proficiency in application threat modeling, including STRIDE and abuse-case analysis • Experience reviewing and remediating insecure CI/CD pipelines • Expertise in API security for REST and GraphQL, including OWASP API Security Top 10 • Ability to read, understand, and apply Terraform, Bicep, and AWS CloudFormation • Familiarity with OPA, Sentinel, and IaC scanning • Proficiency in Python, PowerShell, and Bash scripting • Ability to perform secure code and architecture reviews • Experience with Docker and Kubernetes • Experience securing software supply chains, including SBOM, dependency risk governance, signing, and SLSA • Undergraduate degree in Computer Sciences or Business Management preferred, but not required • Professional, technical, and application security certifications preferred • Demonstrated experience establishing or maturing application security programs and mentoring engineers • Excellent verbal and written communication skills • Demonstrated business acumen and executive presence • Ability to solve complex, abstract problems

🏖️ Benefits

• Medical, Dental, and Vision Insurance • 401(k) • Paid company holidays • Paid time off • Paid parental and caregiver leave • Cross-department training and development • Sponsorship of certifications and credentials for continued learning • Diversity and inclusion initiatives • AI application/resume review opt-out without penalty • Interview recording and transcription opt-out