Senior Application Security Consultant, Strategic Services- Remote (Anywhere in the U.S.)
GuidePoint Security · Remote, US
About the role
A senior consultant in GuidePoint Security's Strategic Services group who delivers application threat modelling, architecture reviews and AppSec and DevSecOps program assessments for clients across industries. The consultant runs several engagements at once, writes reports for technical and management readers with remediation advice, helps develop the practice's offerings, mentors colleagues and contributes research, talks and tools.
GuidePoint prefers people who moved from software development into application security. It asks for at least six years in AppSec or development, three of them in AppSec, two in consulting or internal security roles, coding in a common language, operational DevSecOps experience, hands-on use of generative AI in workflows, and familiarity with OWASP SAMM, NIST SSDF, SLSA and MITRE ATLAS. Travel is up to 10 percent.