Security Consultant – Fixed Term

NCC Group

. Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems .

Posted 9/15/2026contractRemote • United StatesMid-LevelSenior💰 $65,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in application security assessments, including penetration testing and source code review, while effectively communicating complex security concepts to diverse audiences. Proficient in identifying vulnerabilities and providing actionable remediation recommendations based on industry standards.

Highest-signal resume keywords

Application Penetration TestingSource Code ReviewOffensive Security ServicesOWASP FamiliarityRelevant Industry Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application SecurityInfrastructure Security ReviewsCloud Configuration SecurityAI-Based PentestingVulnerability IdentificationRisk DocumentationRemediation RecommendationsSDLC ConsultingTechnical ReportingSecurity Best Practices

Soft Skills

Excellent Written CommunicationStrong Verbal CommunicationAbility to Work IndependentlyClient EngagementTechnical Discussion Participation

Certifications & Qualifications

OSCPOSWEGWAPTCSSLPGWEB

Industry Keywords

NIST StandardsISO StandardsSAE StandardsApplication Security FrameworksSecurity Vulnerabilities

Tech Stack

Tools & technologies

AndroidCloudiOSSDLC

About the role

Key responsibilities & impact

Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems
Conduct infrastructure and cloud configuration security reviews
Conduct assessments incorporating AI-based and traditional pentesting approaches against real world threats
Identify and document security vulnerabilities, misconfigurations, and deviations from best practices
Provide actionable recommendations to address security findings
Prepare clear, professional reports describing identified risks and recommended remediation steps
Participate in client meetings and technical discussions
Work with internal stakeholders and clients to assess products, report findings, and document protocols, policies, and procedures

Requirements

What you’ll need

5+ years in offensive security services
At least 2–3 years focused on application security and source code review
Hands-on engagement delivery across multiple AppSec disciplines — application penetration testing, code review, or SDLC consulting
Ability to work independently under deadlines
Strong technical credibility and comfort operating as a senior voice on engagements
Excellent written communication and ability to produce actionable reports
Strong verbal communication and ability to present as a subject matter expert and explain complex concepts to general audiences
Familiarity with OWASP, NIST, ISO, and SAE standards and frameworks
Relevant bachelor's degree or equivalent experience
Relevant industry certifications strongly preferred: OSCP, OSWE, GWAPT, CSSLP, GWEB, or equivalent application-security focused credentials

Benefits

Comp & perks

A chance to work with an industry leader in cyber security
Access to world-class technical teams and research
A high-energy, collaborative team that values innovation
Flexibility—work remotely or from the office as needed
Opportunities for travel
Competitive compensation and benefits
Potential to renew the fixed-term contract