senior application security consultant

Sennovate

<p>Job Description: Senior Cloud Security Consultant - Azure Security Assessment Position Overview We are seeking experienced Cloud Security Consultants for a 10-week onsite engagement in Abu Dhabi, UAE, to conduct a comprehensive Azure Cloud Security Governance Assessment for a major enterprise client. This role requires deep technical expertise in Azure security, strong consulting skills, and the ability to work effectively in a client-facing environment. Engagement Details <b>Position Title: Senior Cloud Security Consultant </b> Location: Abu Dhabi, UAE (100% onsite) <b>Duration: 10 weeks (with possibility of extension) </b> Start Date: Immediate/Flexible <b>Travel Required: Yes (relocation to Abu Dhabi for engagement duration) </b> Clearance Required: UAE security clearance (assistance provided) Role Summary As a Senior Cloud Security Consultant, you will be part of a specialized team conducting an in-depth security assessment of the client&rsquo;s Azure cloud environment. You will evaluate technical controls, governance frameworks, and compliance posture against UAE regulations and international standards, providing expert recommendations to enhance the organization&rsquo;s cloud security maturity. Key Responsibilities Technical Assessment (60%) 1. Azure Security Architecture Review o Evaluate Azure landing zone design and implementation o Assess network segmentation and security boundaries o Review hub-spoke and virtual network architectures o Analyze traffic flow and data movement patterns o Validate defense-in-depth implementation 2. Security Configuration Assessment o Review Azure Policy and Blueprint implementations o Assess Network Security Groups (NSGs) configurations o Evaluate Azure Firewall and Web Application Firewall rules o Validate Azure Security Center/Defender configurations o Review Key Vault and encryption implementations 3. Identity &amp; Access Management o Assess Azure AD configuration and security settings o Review Privileged Identity Management (PIM) implementation o Evaluate conditional access policies and MFA enforcement o Analyze RBAC roles and permissions o Review service principal and managed identity usage 4. Compliance &amp; Governance o Map controls to UAE CSC National Cloud Security Policy o Assess compliance with NIST CSF, CIS Azure, and ISO 27017 o Review Azure governance framework and policies o Evaluate management group hierarchy and subscriptions o Validate regulatory compliance controls 5. Data Security &amp; Privacy o Review data classification and labeling practices o Assess encryption at rest and in transit o Evaluate data residency and sovereignty controls o Review database security configurations o Validate data loss prevention mechanisms Consulting &amp; Advisory (25%) 1. Stakeholder Engagement o Conduct interviews with technical and business stakeholders o Facilitate workshops and discovery sessions o Present findings to technical and executive audiences o Build relationships with client teams o Manage stakeholder expectations 2. Risk Assessment &amp; Remediation o Identify and document security vulnerabilities o Perform risk scoring and prioritization o Develop practical remediation recommendations o Create implementation roadmaps o Provide cost-benefit analysis for recommendations 3. Knowledge Transfer o Conduct training sessions for client teams o Develop technical documentation and guides o Share best practices and industry insights o Mentor junior team members o Create reusable templates and frameworks Documentation &amp; Reporting (15%) 1. Report Development o Document technical findings with evidence o Write clear and actionable recommendations o Develop executive summaries o Create compliance matrices and gap analyses o Produce technical remediation playbooks 2. Presentation Materials o Develop executive presentations o Create technical deep-dive materials o Design visual dashboards and heat maps o Prepare workshop materials o Document architecture diagrams Required Qualifications Education <b>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field </b> Master&rsquo;s degree preferred but not required Experience <b>Minimum 5-7 years of information security experience </b> Minimum 3-4 years of hands-on Azure security experience <b>Minimum 2-3 years of security consulting/assessment experience </b> Experience with enterprise-scale Azure deployments (500+ resources) <b>Experience working in the Middle East region (preferred) Technical Skills Azure Security (Expert Level): - Azure Security Center/Microsoft Defender for Cloud - Azure Policy and Blueprints - Azure AD and Privileged Identity Management - Azure Key Vault and encryption services - Azure Firewall and Network Security Groups - Azure Monitor and Log Analytics - Azure DevOps security and CI/CD pipelines - Azure Kubernetes Service (AKS) security - Azure SQL and Cosmos DB security Security Frameworks &amp; Standards: - NIST Cybersecurity Framework - CIS Controls and Benchmarks - ISO 27001/27017/27018 - CSA Cloud Controls Matrix - OWASP Top 10 and API Security - Zero Trust Architecture principles - Well-Architected Framework (Security Pillar) Tools &amp; Technologies: - PowerShell and Azure CLI - ARM Templates and Bicep - Terraform/Infrastructure as Code - Git and version control - Security scanning tools (Qualys, Nessus, etc.) - SIEM platforms (Sentinel, Splunk, QRadar) - DevSecOps tools and practices Cloud Platforms: - Microsoft Azure (Primary) - Knowledge of AWS/GCP (Advantageous) - Hybrid cloud architectures - Multi-cloud security considerations Soft Skills Consulting Excellence: - Outstanding verbal and written communication - Strong presentation and facilitation skills - Ability to explain technical concepts to non-technical audiences - Professional demeanor and appearance - Cultural sensitivity and adaptability Problem-Solving: - Strong analytical and critical thinking abilities - Creative approach to complex problems - Ability to work under pressure - Detail-oriented with quality focus - Self-motivated and proactive Collaboration: - Team player with collaborative mindset - Ability to work with diverse stakeholders - Conflict resolution skills - Mentoring and coaching abilities - Crossfunctional coordination Certifications (Preferred) </b> Microsoft Certified: Azure Security Engineer Associate (AZ-500) <b>Microsoft Certified: Azure Solutions Architect Expert </b> Microsoft Certified: Cybersecurity Architect Expert <b>Microsoft Certified: Azure DevOps Engineer Expert Certifications (Preferred) </b> CISSP (Certified Information Systems Security Professional) <b>CCSP (Certified Cloud Security Professional) </b> CISA (Certified Information Systems Auditor) <b>CEH (Certified Ethical Hacker) </b> CompTIA Security+ <b>AWS/GCP Security Certifications Language Requirements </b> English: Fluent (written and spoken) - Mandatory <b>Arabic: Basic understanding - Advantageous</b></p><p>Job Type: Contract</p>

Senior Cloud Security Consultant - Azure Security Assessment

Salt

<div>
 <p>
  Job Title: Cybersecurity Consultant
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Overview
  </strong>
 </p>
 <p>
  We are seeking an experienced Cybersecurity Consultant with strong expertise in advisory, consulting, and governance, risk, and compliance (GRC) practices. The ideal candidate will be responsible for conducting cybersecurity maturity assessments, designing strategies, and developing actionable roadmaps to strengthen organizational security postures.
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Lead and deliver cybersecurity maturity assessments across diverse industry sectors.
  </li>
  <li>
   Develop cybersecurity strategies, frameworks, and roadmaps tailored to client needs.
  </li>
  <li>
   Provide advisory services on governance, risk, and compliance (GRC) best practices.
  </li>
  <li>
   Support clients in aligning cybersecurity initiatives with regulatory requirements and business objectives.
  </li>
  <li>
   Facilitate workshops and presentations with senior stakeholders to communicate findings and recommendations.
  </li>
  <li>
   Mentor junior consultants and contribute to knowledge sharing within the team.
  </li>
 </ul>
 <p>
  <strong>
   Qualifications &amp; Experience
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s or Master&rsquo;s degree in Information Security, Computer Science, IT, or a related field.
  </li>
  <li>
   8&ndash;12 years of progressive experience in cybersecurity consulting, advisory, or risk management roles.
  </li>
  <li>
   Proven track record in cybersecurity maturity assessments, strategy design, and roadmap definition.
  </li>
  <li>
   Strong background in GRC consulting, including frameworks such as ISO 27001, NIST, or COBIT.
  </li>
  <li>
   Excellent communication and stakeholder management skills.
  </li>
  <li>
   Ability to work independently as well as collaboratively in cross-functional teams.
  </li>
 </ul>
 <p>
 </p>
</div>


Senior Cyber Security Consultant

SoftwareOne

<div>Job Function: Software &amp; Cloud The role:
<p>
We are looking for an <b>Information Security Specialist</b> to join our team and strengthen our cybersecurity capabilities. In this role, you will work on protecting endpoints, preventing data loss, and responding to security threats in close collaboration with global and local teams. If you are passionate about security and want to make a real impact, this might be the right fit for you.</p><h3 class="jobSectionHeader"><b>
Key responsibilities:</b></h3><ul><li>
Implement and optimize <b>endpoint security, DLP, and EDR</b> solutions</li><li>
Monitor and report on incidents using <b>IPS/IDS</b> systems</li><li>
Identify and mitigate risks according to company security policies</li><li>
Work closely with IT and global security teams to ensure proactive protection</li><li>
Support and promote <b>security awareness</b> across the organization</li><li>
Contribute to <b>threat intelligence</b> and <b>cloud data protection</b> initiatives</li></ul>
What we need to see from you:
<ul><li><p>
4&ndash;5 years of professional experience in <b>information security</b></p></li><li><p>
Hands-on expertise with <b>Endpoint Security, DLP, EDR, IPS/IDS</b> tools</p></li><li><p>
Familiarity with <b>threat intelligence</b> and <b>cloud security</b></p></li><li><p>
Knowledge of security frameworks (e.g., <b>ISO 27001, NIST</b>)</p></li><li><p>
A degree in Computer Engineering, Electrical &amp; Electronics, or a related field</p></li><li><p>
Good English communication skills (written and spoken)</p></li></ul><p><b>
Nice to have</b>:</p><ul><li><p>
Security certifications (e.g., <b>CISSP, CISM, CEH</b>)</p></li><li><p>
Experience with <b>Trellix, Skyhigh Security, Kaspersky</b> or similar tools</p></li></ul><p></p><p><i><br>
If you want to grow your expertise in a global environment and play a key role in protecting business-critical systems - we&rsquo;d love to hear from you!</i></p><p></p><p><b><br>
Our company benefits vary based on your location, but always include:</b></p><div><ul><li><p>
Global company culture: We defined our 7 core values through our company culture (https://www.softwareone.com/en/our-story/our-values).</p></li><li><p>
A mentor who supports your successful start and is at your side with advice and action.</p></li><li><p>
President&rsquo;s Club: Recognition awarded by leadership and your peers.</p></li><li><p>
Flexible work: Do great work from anywhere but also visit local office to deliver excellence in team relationship.</p></li><li><p>
Lifelong education: A variety of training and development opportunities.</p></li><li><p>
Employee stock option programs (SIX: SWON): Be an owner. All employees can be shareholders.</p></li><li><p>
Hire to Grow: We optimize our internal structures and feedback culture constantly to be your Employer of Choice, today and in future.</p></li></ul></div><br>
<p></p>
Why SoftwareOne?:
<p></p><p><b>
SoftwareOne is powered by Swomies!</b></p><p></p><p><br>
Here at SoftwareOne, we give you the flexibility to unleash your creativity, without limits. We encourage autonomy and thinking outside the box - and we can&rsquo;t wait to hear your new ideas., and although all businesses say it, we truly believe in work - life harmony. Our people are our greatest asset, and we&rsquo;ll go the extra mile to ensure you&rsquo;re happy here. We want our people to be their true authentic selves at all times, because that&rsquo;s when real creativity happens.</p><p></p><div><p><b><br>
Senior Information Security Consultant</b></p></div><div><p><br>
contract type: full time | location: Istanbul, Turkey<br>
working model: hybrid</p></div></div>

Senior Information Security Consultant

Innovative Solutions

<div><h3 class="jobSectionHeader"><b>Company Description</b></h3><p>
Innovative Solutions (IS) is a leading pure-player Cybersecurity company established in 2003, headquartered in Riyadh, with operations in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our mission is to bring trust to cyberspace and ensure that your business is secured through comprehensive cybersecurity solutions and services, which include advisory services, technical assurance, solution deployment, professional services, and managed security services.</p><h3 class="jobSectionHeader"><b>
Role Description</b></h3><p>
The Senior Vulnerability and Patch Management Consultant will be responsible for overseeing the vulnerability management and patch management processes across our organization and our clients. This role requires a deep understanding of security vulnerabilities, patch management practices, and risk assessment methodologies to ensure the integrity and security of systems and data.</p><h3 class="jobSectionHeader"><b>
Responsibilities</b></h3><p>
Comprehensive Vulnerability Assessment:</p><ul><li><ul>
<li>Conduct a comprehensive assessment of the IT Infrastructure and applications to identify existing security vulnerabilities.</li>
<li>Prioritize and categorize the identified vulnerabilities based on their risk level, likelihood of exploitation, and potential impact on business operations.</li>
<li>Deliver a detailed technical report outlining</li>
<li>Assessment findings, risk prioritization, and recommended remediation strategies.</li>
</ul></li></ul><p>Development and Implementation of Security Strategies:</p><ul><li><ul>
<li>Develop tailored and comprehensive strategies to address identified vulnerabilities.</li>
<li>Align security measures with organizational objectives and compliance requirements</li>
</ul></li></ul><p>Development and Implementation of Security Strategies:</p><ul><li><ul>
<li>Deliver target training sessions to internal teams on Cybersecurity best practices.</li>
<li>Enhance staff with practical knowledge to recognize and respond to security threats effectively.</li>
</ul></li></ul><p>Continuous Support and Reporting:</p><ul><li><ul>
<li>Provide continuous support services to ensure the maintenance and effectiveness of implemented security measures</li>
<li>Conduct regular reviews and assessments to identify areas for improvement and ensure compliance with evolving standards</li>
<li>Generate and provide periodic reports outlining the current status of identified vulnerabilities</li>
<li>Track and document the progress of mitigation efforts and remediation activities</li>
<li>Provide insights and actionable recommendations to support informed decision makings and continuous improvement</li>
<li>Expertise knowledge on Manage Engine Endpoint Central Enterprise (Distributed) Edition</li>
</ul></li></ul><p><b>Requirements</b></p><ul>
<li>Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.</li>
<li>A minimum of 5 years of experience in vulnerability management, patch management, or related information security roles.</li>
<li>In-depth knowledge of vulnerability assessment tools and methodologies.</li>
<li>Proficiency with patch management solutions and processes.</li>
<li>Strong understanding of security frameworks and compliance standards (e.g., NIST, ISO 27001, CIS Controls).</li>
<li>Demonstrated experience in performing risk assessments and developing mitigation strategies.</li>
<li>Excellent analytical, problem-solving, and communication skills.</li>
<li>Ability to effectively lead projects and mentor junior team members.</li>
<li>Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Information Security Manager (CISM) are highly desirable.</li></ul></div>

Senior Vulnerability and Patch Management Consultant (RE)

Managed Services

<div><p><b>Sr Offensive Security Consultant</b></p><p>
Managed Services is hiring a highly skilled Offensive Security Consultant to join cybersecurity team. The candidate will have in-depth expertise in offensive security, strong problem-solving skills, and a keen interest in competitor analysis. you will be responsible for planning and executing sophisticated Red Team operations and penetration testing, simulating cyberattacks, identifying vulnerabilities across networks, systems, and applications, and strengthening the organization's overall security posture while staying aware of competitor activities in the market.</p><p></p><p><b><br>
Roles &amp; Responsibilities
</b></p><ul><li>Collaborate with clients to understand their security needs, objectives, and risk profiles</li><li>providing strategic guidance on improving detection, prevention, and response capabilities</li><li>Lead, plan, and execute advanced penetration testing and red team operations across a wide range of environments, including web, network, mobile, wireless, cloud, source code, IoT, and physical assets</li><li>Develop and simulate sophisticated, realistic threat scenarios using industry-standard frameworks (e.g., MITRE ATT&amp;CK), mimicking adversary tactics, techniques, and procedures (TTPs)</li><li>Customize attack simulations to reflect industry-specific threats and risk profiles</li><li>Conduct specialized red team engagements, including social engineering, phishing, and physical security assessments</li><li>Demonstrate hands-on expertise with a variety of offensive security tools and methodologies</li><li>Prepare and deliver detailed technical reports and executive-level presentations</li><li>Ensure documentation of all procedures, findings, and recommendations meets organizational and client standards</li><li>Work closely with threat intelligence, SOC, incident response, and vulnerability management teams to drive holistic security improvements</li><li>Contribute to developing internal methodologies, tooling, and red team frameworks</li><li>Ensure all security testing aligns with applicable compliance frameworks and best practices</li><li>Stay up to date with the latest cybersecurity trends, threats, vulnerabilities, and advancements in offensive security</li><li>Continuously enhance red team methodologies based on industry evolution and new threat intelligence</li></ul><p><b>
Requirements</b></p><ul><li>A bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field.</li><li>5+ years of experience in penetration testing and red teaming.</li><li>Professional certifications such as OSCP, OSEP, CRTO, CRTL or CREST CRT/CCT (or equivalent).</li><li>Deep understanding of penetration testing methodologies, adversary tactics, techniques, and procedures (TTPs), red team operations lifecycle, and purple teaming principles.</li></ul><p>
&middot; &middot; Experience developing and conducting red team and penetration testing engagements.</p><ul><li>Experience with exploitation frameworks (e.g., Cobalt Strike, Metasploit, Sliver), custom payload development, and evasion techniques.</li><li>Strong report writing and communication skills, capable of translating technical findings into business risks and actionable recommendations.</li></ul></div>

Sr. Offensive Security Consultant

Progressive Leasing

<div><div>Progressive Leasing is a leading provider of in-store and e-commerce lease-to-own solutions. As an almost 20+ year old FinTech company that has gone from start-up to industry leader, we know how to innovate, simplify, and value all people. We are a company founded on our grit and we are constantly looking to the future. As an ever-evolving group of entrepreneurs and technologists, we strive to do the right thing period in all aspects of our work. We are a subsidiary of PROG Holdings (NYSE: PRG), an exciting FinTech holding company, with three business segments including Progressive, Vive Financial, and Four, a Buy Now Pay Later (BNPL) platform.</div><div></div><div><div><div><div><div><div><div><div><div><div><br>
We are currently hiring a Senior Application Security Engineer to help grow our company and ensure our mission is achieved!</div><div></div><div><i><br>
This role is a work from home position and can be performed remotely anywhere in the continental US or in one of our corporate locations in Utah or Arizona.</i></div><div></div><div><i><br>
Employee Value Proposition (EVP): PROG is dedicated to providing people with opportunity; opportunity for inclusive collaboration, opportunity for innovation, and opportunity for development.</i></div><div></div><div>
WE ARE: Prog Tech embodies the modernity and transformational vision that is core to our business evolution. As passionate and hungry technical experts, we join together on the mission of progressing through technology. We believe in taking pride in our engineering, in the relentless pursuit of daily progress, and to bring others with you in your march to the future. We continuously experiment, fail fast, and constantly deliver</div><div></div><div><br>
YOU ARE: The Senior Application Security Engineer plays a critical role in partnering closely with engineering and DevOps teams to ensure that security is built into our applications and infrastructure from start to finish. You will take ownership of building security into the CI/CD pipelines, provide expertise in threat modeling, and mentoring others to raise overall AppSec maturity.</div><div></div><div><br>
YOUR DAY-TO-DAY:</div><ul><li><div>
Identify areas for improvement in our current CI/CD pipeline and design, implement, and maintain security enhancements.</div></li></ul><ul><li><div>
Partner with engineering teams to ensure security controls and tooling are integrated into the SDLC.</div></li></ul><ul><li><div>
Develop and lead a threat modeling program for new and existing applications.</div></li></ul><ul><li><div>
Identify vulnerabilities across applications and APIs. Engage engineering teams for remediation.</div></li></ul><ul><li><div>
Collaborate with the business and engineering teams to provide guidance on security best practices, prioritization of vulnerability remediation, etc.</div></li></ul><ul><li><div>
Evaluate, implement, and manage security tools and technologies.</div></li></ul><ul><li><div>
Mentor and coach engineers, DevOps, and other team members to build a strong AppSec culture.</div></li></ul><ul><li><div>
Participate in AppSec team programs, such as Security Influencers (Champions) and office hours, to cultivate relationships and trust with the business and engineering teams.</div></li></ul><ul><li><div>
Document things like security best practices, proprietary CI/CD pipeline requirements, and AppSec processes. Disseminate documentation across the business, engineering, DevOps, and security teams and hold training workshops, where applicable.</div></li></ul><div></div><div>
YOU&rsquo;LL BRING:</div><ul><li><div>
5+ years of experience in application security engineering</div></li></ul><ul><li><div>
Working expertise in GitHub workflows, AWS, and Azure.</div></li></ul><ul><li><div>
Proven experience building secure pipelines for CI/CD.</div></li></ul><ul><li><div>
Deep understanding of application security concepts, including threat modeling, risk assessment, and secure coding best practices.</div></li></ul><ul><li><div>
Strong experience using DAST, IaC, SAST, SCA, and other security tools &ndash; and implementing them into pipelines.</div></li></ul><ul><li><div>
Familiarity with common security frameworks (i.e., OWASP, NIST, CIS).</div></li></ul><ul><li><div>
Strong problem-solving and analytical skills with the ability to think like an attacker &ndash; while acting as a defender.</div></li></ul><ul><li><div>
Excellent communication and collaboration skills.</div></li></ul><ul><li><div>
A team-oriented mindset with a passion for sharing knowledge and elevating others.</div></li></ul><div></div><div><br>
WE OFFER:</div><ul><li><div>
Competitive Compensation</div></li></ul><ul><li><div>
Full Health Benefits; Medical/Dental/Vision/Life Insurance + Paid Parental Leave</div></li></ul><ul><li><div>
Company Matched 401k</div></li></ul><ul><li><div>
Paid Time Off + Paid Holidays + Paid Volunteer Hours</div></li></ul><ul><li><div>
Employee Resource Groups (Black Inclusion Group, Women in Leadership, PRIDE, Adelante)</div></li></ul><ul><li><div>
Employee Stock Purchase Program</div></li></ul><ul><li><div>
Tuition Reimbursement</div></li></ul><ul><li><div>
Charitable Gift Matching</div></li></ul><ul><li><div>
Job required equipment and services</div></li></ul></div></div></div></div></div></div></div></div></div><div></div><div><i>
Progressive Leasing welcomes and encourages diversity in the workplace. We do not discriminate in any aspect of employment on the basis of race, color, religion, national origin, ancestry, gender, sexual orientation, gender identity and/or expression, age, veteran status, disability, or any other characteristic protected by federal, state, or local employment discrimination laws where Progressive Leasing does business.</i></div></div>

Senior Application Security Engineer (Remote)

Devoteam

<div>
 <br/>
 <strong>
  Company Description
  <br/>
  <br/>
 </strong>
 <br/>
 <strong>
  Tech for People Unlocks the Future
  <br/>
  <br/>
 </strong>
 At Devoteam, we believe that technology, combined with strong human values, can actively drive change for the better. Discover how Tech for People is shaping the future, creating a positive impact on individuals and the world around us.
 <br/>
 <br/>
 With over 25 years of passion for technology and a presence in 18+ countries across EMEA and beyond, we are committed to leveraging innovation, expertise, and human-centric values to make a difference.
 <br/>
 <br/>
 <strong>
  Devoteam Culture &amp; Values:
  <br/>
  <br/>
 </strong>
 True innovation is born from a powerful culture, fused with meaningful values.
 <br/>
 <br/>
 <strong>
  Culture:
  <br/>
 </strong>
 <ol>
  <li>
   <br/>
   <strong>
    Fair and courageous
    <br/>
   </strong>
   <br/>
   Everyone is treated fairly &ndash; this fuels bravery. At Devoteam, we always make fair decisions. We listen and are willing to be challenged, taking courageous decisions as a result. We help our employees to progress at every step and congratulate those who deserve it.
   <br/>
   <br/>
  </li>
 </ol>
 &nbsp;
 <br/>
 <ol>
  <li>
   <br/>
   <strong>
    Ambition and results
    <br/>
   </strong>
   <br/>
   Ambition is nurtured at every step &ndash; this drives results. We are ambitious entrepreneurs with a taste for performance, growth and celebrating success. Commitments are always kept as we seek to achieve profitable growth to create value and employment. We aim to bring as much value as possible to our clients, at every touchpoint.
   <br/>
   <br/>
  </li>
 </ol>
 &nbsp;
 <br/>
 <ol>
  <li>
   <br/>
   <strong>
    Learning and innovating
    <br/>
   </strong>
   <br/>
   Curiosity and learning are at our core &ndash; this stimulates innovation. At Devoteam, we are curious. We learn and embrace innovation constantly to meet challenges and build partnerships of excellence.
   <br/>
   <br/>
  </li>
 </ol>
 &nbsp;
 <br/>
 <ol>
  <li>
   <br/>
   <strong>
    Caring and sharing
    <br/>
   </strong>
   <br/>
   A caring attitude is infused into our culture &ndash; this encourages sharing. We believe in the power of teams, we promote support and collaboration.
   <br/>
   <br/>
   At Devoteam, we care about our teams and want to work in a positive, productive environment. We support the development of talent and careers,&nbsp;
   <br/>
   <br/>
  </li>
 </ol>
 &nbsp;
 <br/>
 <br/>
 <strong>
  knowing that success is the result of collaboration. Alone, we go faster, but together, we go further.
  <br/>
  <br/>
 </strong>
 &nbsp;
 <br/>
 <br/>
 <strong>
  Because alone, we go faster &ndash; but together, we go further.
  <br/>
  <br/>
 </strong>
 <strong>
  Values:
  <br/>
 </strong>
 <ol>
  <li>
   <br/>
   Respect
   <br/>
  </li>
  <li>
   <br/>
   Frankness
   <br/>
  </li>
  <li>
   <br/>
   Passion
   <br/>
   <br/>
  </li>
 </ol>
 &nbsp;
 <br/>
 <br/>
 <strong>
  Business Unit:
  <br/>
  <br/>
 </strong>
 Cyber Trust&nbsp;
 <br/>
 <br/>
 <strong>
  Level:
  <br/>
  <br/>
 </strong>
 Senior to Managerial -level
 <br/>
 <br/>
 <br/>
 <br/>
 <br/>
 <br/>
 To know more about us, please visit:&nbsp;www.devoteam.com
 <br/>
 <br/>
 &nbsp;
 <br/>
 <br/>
 <br/>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Champion secure coding practices and integrate security requirements into all phases of the Software Development Life Cycle (SDLC).
  </li>
  <li>
   Collaborate with development teams to embed security considerations in application design, development, and testing.
  </li>
  <li>
   Perform threat modeling, risk assessments, and security reviews at each stage of the SDLC.
  </li>
  <li>
   Develop and implement security testing strategies and frameworks, including SAST, DAST, and IAST.
  </li>
  <li>
   Provide expert guidance on secure coding standards, vulnerability remediation, and security best practices.
  </li>
  <li>
   Contribute to the establishment and maintenance of application security policies, standards, and guidelines.
  </li>
  <li>
   Monitor and analyze application security trends and emerging threats to proactively address potential risks.
  </li>
  <li>
   Champion a security-first culture within the development organization, fostering collaboration and knowledge sharing.
  </li>
 </ul>
 <br/>
 <br/>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in Computer Science, Information Security, or a related field.
  </li>
  <li>
   8+ years of experience in&nbsp;Application Security.
  </li>
  <li>
   Extensive experience in application security and secure SDLC implementation.
  </li>
  <li>
   Deep understanding of application security vulnerabilities, threats, and attack vectors.
  </li>
  <li>
   Strong knowledge of web application architectures, technologies, and security frameworks (e.g., OWASP, SANS).
  </li>
  <li>
   Proficiency in secure coding practices and vulnerability remediation techniques.
  </li>
  <li>
   Excellent communication, collaboration, and presentation skills.
  </li>
  <li>
   Relevant certifications (e.g., OSCP, CEH, GWAPT, CSSLP) are highly desirable.
  </li>
 </ul>
</div>


Application Security Lead Consultant

Search 10000+ Senior application security consultant jobs near you this October. New roles added regularly across leading industries. Apply today.