Principal AppSec Consultant

2 days ago Be among the first 25 applicantsDirect message the job poster from RiverSafeRecruitment Manager @ RiverSafe: Helping to grow a company #cybersecurity #devops #appsecThe RoleThe Principal Application Security Consultant is a senior-level role responsible for leading and improving application security strategies, conducting security assessments and providing expert guidance on secure development practices. This role involves working closely with development teams, security engineers and business stakeholders to integrate security into the software development lifecycle (SDLC), mitigate risks and ensure compliance with security standards.SkillsStrong knowledge of application security vulnerabilities (OWASP Top 10, CWE, SANS 25).Hands-on remediation support and vulnerability management expertise.Hands-on experience with threat modelling and secure code reviews.Experience with Mobile Application Security and API Security.Familiarity with security tools (Burp Suite, Fortify, Checkmarx, Veracode, ZAP, etc.).Experience with cloud security (AWS, Azure, GCP) and container security (Docker, Kubernetes).Ability to conduct maturity assessments and gap analysis.Familiarity with RASP technology as well as traditional security tools like SAST or DAST.Excellent communication skills to engage with developers, executives and clients.Experience in consulting and working with multiple clients on application security projects.Certifications: CISSP, OSCP, GWAPT, CEH, CSSLP, or other relevant security certifications.Seniority levelMid-Senior levelEmployment typeFull-timeJob functionInformation TechnologyIndustriesComputer and Network Security, IT Services and IT Consulting, and Software Development #J-18808-Ljbffr