Application Security Consultant
Hybrid - US
Application Security Consultant
Full Time • Hybrid - US
Must Have Responsibilities
- Lead application security design across web, mobile, and AWS cloud-native systems, including secure architecture reviews and CI/CD security integration.
- Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk), triage vulnerabilities, and guide remediation aligned to OWASP Top Ten.
- Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3) and support runtime and application-layer protections.
- Partner with release and change management to ensure secure, stable production deployments and support go-live readiness.
- Provide security input in architecture and project planning, ensuring requirements are embedded early in design and development.
- Track vulnerabilities, produce reporting, and manage remediation progress across engineering teams.
Must Have Qualifications
- 3+ years in application security (offense and defense) with hands-on SAST/SCA experience.
- Strong knowledge of OWASP Top Ten and web/API security vulnerabilities and remediation.
- Experience securing AWS cloud services and working with cloud security platforms (e.g., Wiz, Prisma Cloud, Orca).
- Ability to read and review code in Java, JavaScript/Node.js, or Python for security validation.
- Experience with CI/CD pipelines, DevSecOps practices, and secure SDLC integration.
- Strong communication skills with ability to influence technical and business stakeholders.
- Experience working with change/release management in production environments.
Nice to Have Responsibilities
- Automate security testing and improve security tooling workflows.
- Develop and improve security runbooks, documentation, and operational procedures.
- Support penetration testing, secure code reviews, or developer training as needed.
- Participate in additional architecture discussions or advisory meetings when required.
Nice to Have Qualifications
- Familiarity with threat intelligence and how it informs application security controls.
- Experience driving developer security adoption through workshops or working sessions.
- Strong understanding of agile delivery environments and enterprise release governance.
Flexible work from home options available.
Compensation: $80.00 - $90.00 per hour
Who We Are
High Bridge is a bottom-up consulting firm with more than two decades of experience creating innovative solutions for the technology industry.
- • We connect thoughtfully curated talent with reputable employers in our field.
- • We partner with like-minded companies to bolster mutual success and understanding.
- • We deliver results through strategic planning and meticulous project management.
At High Bridge, we believe that success is a measure of results and process, product and person. We are proud to bring integrity and humanity to the work that we do each day. Whether we’re interviewing prospective associates, brainstorming with partners, or troubleshooting with vendors, we pledge our commitment to honesty, transparency, and good humor at every junction.
Careers
Are you passionate about technology? Do you believe in no finish lines? Are people and process the heel in your stride? High Bridge Consulting may be the next journey for you.
Here at High Bridge, our island is technology, but our village is human. We value a culture of authenticity, integrity, and creativity. We work smart, not hard, we look forward, not backward, and we love coming to work on Monday.
If you aren’t afraid of heights, join us on our bridge.