Application Security Consultant

DirectDefense

. Conduct thorough analysis to identify and exploit vulnerabilities in customer applications .

Posted 9/18/2026full-timeRemote • Colorado • United StatesJunior💰 $90,000 - $100,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security analysis, vulnerability assessment, and remediation strategies, with a strong foundation in dynamic and static code reviews. Proficient in utilizing tools like Burp Suite and familiar with industry standards such as OWASP ASVS.

Highest-signal resume keywords

Application Security PrinciplesDynamic TestingStatic Code ReviewsBurp SuiteOffensive Security Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentPenetration TestingNetwork SecurityWeb Application VulnerabilitiesCryptographyAuthentication MechanismsAuthorization MechanismsAutomated Application TestingManual Application Testing

Soft Skills

Excellent Communication Skills

Tools & Technologies

Burp SuiteVulnerability Scanning ToolsAWS

Certifications & Qualifications

OSCPBSCPOSWEGWAPT

Industry Keywords

OWASP ASVSApplication SecurityCommon VulnerabilitiesExploitation Techniques

Tech Stack

Tools & technologies

AWS

About the role

Key responsibilities & impact

Conduct thorough analysis to identify and exploit vulnerabilities in customer applications
Collaborate with development teams to remediate identified vulnerabilities and enhance application security
Perform dynamic testing and static code reviews to identify security vulnerabilities and weaknesses
Utilize industry-leading tools, focusing on application testing workspaces such as Burp Suite
Stay current with developments in application security, tools, and methodologies such as OWASP ASVS
Assess customer applications, validate vulnerabilities, and recommend practical remediation strategies

Requirements

What you’ll need

1-3 years of hands-on experience in network/infrastructure security and penetration testing
Bachelor’s degree in Computer Science, Engineering, Math, or a related field, or equivalent hands-on experience, classroom project work, or internship
Strong understanding of application security principles and common vulnerabilities
Experience in performing dynamic and static code reviews
Familiarity with vulnerability scanning tools, specifically Burp Suite
Excellent written and verbal communication skills, with the ability to convey complex security topics clearly and concisely to diverse audiences
Certifications such as OSCP, BSCP, OSWE, GWAPT, or related offensive security certifications are a strong plus
Knowledge of common web application vulnerabilities and exploitation techniques
Understanding of cryptography, authentication, and authorization mechanisms
Experience with automated and manual application testing is a plus
AWS experience is a plus

Benefits

Comp & perks

401(k)
AD&D Insurance
Dental Insurance
Disability insurance
Health insurance
Life insurance
Vision insurance
Flex PTO program
Paid certification and continuing education
Up to 10% annual bonus (listed in the compensation section)