Consultant - Application Security

About the role

We are looking for a Consultant specialized in Application Security to join our team. You will work on securing web, mobile, API and thick‑client applications, helping our clients protect their digital assets.

Key responsibilities

• Conduct penetration tests on various application types and produce detailed remediation reports.
• Implement and manage automated security scanning tools (SAST, DAST, SCA) to continuously monitor code, configurations and dependencies.
• Perform threat modelling to identify and mitigate potential security risks.
• Review application code for vulnerabilities and provide practical remediation guidance.
• Develop and deliver training sessions and workshops to raise application‑security awareness among development teams.
• Assess, recommend and evaluate security testing tools and technologies.
• Create and maintain documentation for security assessments, vulnerability management and security policies.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field.
• Minimum 2 years of experience in application security, software development or a related discipline.
• Relevant certifications such as BCSP, OSWA, OSWE, eWPT, eWPTX or SEC542 are highly desirable.
• Strong understanding of secure coding practices and familiarity with at least one programming language.
• Knowledge of security frameworks and guidelines (OWASP Top 10, ASVS, MASVS, WSTG, MSTG).
• Familiarity with DevSecOps practices and CI/CD pipelines is a plus.

Required skills

• Burp Suite
• Fortify
• SonarQube
• Postman