Security Consultant – Fixed Term

🔥 11 minutes ago

🇺🇸 United States – Remote

💵 $65k - $150k / year

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NCC Group

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1999

💼 Consulting

🏥 Healthcare

🎖️ Defense

Consulting • Healthcare • Defense

NCC Group is a global cyber security company that helps organizations and governments improve their digital resilience through end-to-end services. Its capabilities include technical assurance (application, hardware, network and cryptography testing), digital forensics and 24/7 incident response, managed security services, threat intelligence, vulnerability management, and consulting for strategy, risk and compliance. NCC Group also offers services like bug bounty programs, escrow services, and training to reduce cyber risk and support secure digital transformation.

📋 Description

• Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems • Conduct infrastructure and cloud configuration security reviews • Conduct assessments incorporating AI-based and traditional pentesting approaches against real world threats • Identify and document security vulnerabilities, misconfigurations, and deviations from best practices • Provide actionable recommendations to address security findings • Prepare clear, professional reports describing identified risks and recommended remediation steps • Participate in client meetings and technical discussions • Work with internal stakeholders and clients to assess products, report findings, and document protocols, policies, and procedures

🎯 Requirements

• 5+ years in offensive security services • At least 2–3 years focused on application security and source code review • Hands-on engagement delivery across multiple AppSec disciplines — application penetration testing, code review, or SDLC consulting • Ability to work independently under deadlines • Strong technical credibility and comfort operating as a senior voice on engagements • Excellent written communication and ability to produce actionable reports • Strong verbal communication and ability to present as a subject matter expert and explain complex concepts to general audiences • Familiarity with OWASP, NIST, ISO, and SAE standards and frameworks • Relevant bachelor's degree or equivalent experience • Relevant industry certifications strongly preferred: OSCP, OSWE, GWAPT, CSSLP, GWEB, or equivalent application-security focused credentials

🏖️ Benefits

• A chance to work with an industry leader in cyber security • Access to world-class technical teams and research • A high-energy, collaborative team that values innovation • Flexibility—work remotely or from the office as needed • Opportunities for travel • Competitive compensation and benefits • Potential to renew the fixed-term contract