Principal Application Security Consultant

Pellera Technologies

. Deliver red team projects and techniques focused on business outcomes and reducing client risk .

Posted 10/21/2026full-timeRemote • United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in advanced application security testing methods, including penetration testing and threat analysis, while effectively communicating findings and remediation strategies to clients. Possesses a strong understanding of security frameworks and the ability to think like a threat actor to enhance client security posture.

Highest-signal resume keywords

Advanced Application Security TestingKnowledge of OWASP ASVSPenetration Testing ExperienceOSWE CertificationThreat Analysis Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingThreat AnalysisRisk AnalysisVulnerability AssessmentNetwork-Layer TestingPassword CrackingObfuscation TechniquesSocial Engineering ExercisesWireless Penetration TestingTechnical Documentation

Soft Skills

Client-First MindsetProfessional Customer InteractionTeam CollaborationIndependent WorkExcellent Report Writing

Certifications & Qualifications

OSWE CertificationOffensive Security Certifications

Industry Keywords

OWASP Top 10OSSTMMMITRE ATT&CK FrameworkCTFsActive Directory AttacksAdversary-In-The-Middle AttacksRelay-Based AttacksEDR Solutions

About the role

Key responsibilities & impact

Deliver red team projects and techniques focused on business outcomes and reducing client risk
Work with diverse Fortune 1000 clients to fully test their environments
Apply advanced technical methods to test, prove, and validate technical controls in client applications
Conduct technical assessments of web applications, APIs, mobile applications, and AI-enabled applications
Perform threat analysis by identifying critical assets and services, relevant threat actors, and likely threat events
Conduct pre-assessment research and preparation, including reconnaissance, documentation, and customer interviews
Document security weaknesses and reproduction steps
Analyze security findings, including risk and root-cause analysis
Research and propose practical remediation

Requirements

What you’ll need

Advanced technical methods for application security testing
Knowledge of OWASP ASVS, OWASP Top 10s, OSSTMM, and MITRE ATT&CK Framework
Involvement in security-related projects or communities, including CTFs
Ability to think like a threat actor or attacker
Client-first mindset and professional customer interaction
Ability to work independently and as part of a team
Ability to conduct network-layer penetration tests of external and internal client networks (preferred)
Knowledge of Active Directory attacks, adversary-in-the-middle attacks, and relay-based attacks in Windows networks (preferred)
Experience with password spraying and password cracking (preferred)
Experience with obfuscation/encoding to bypass security controls (preferred)
Experience bypassing common security technologies such as advanced EDR solutions (preferred)
Experience conducting social engineering exercises under Rules of Engagement (preferred)
Experience conducting wireless penetration tests (preferred)
Bachelor's degree in Computer Science, Computer Information Systems, or equivalent (preferred)
OSWE certification or equivalent advanced-level certification required
Other offensive security certifications are a plus
Excellent report writing and consultative skills
Experience as a penetration tester and vulnerability assessor
Must be able to sit for prolonged periods and work at a computer
Must be able to lift up to 15 pounds at times

Benefits

Comp & perks

Equal opportunity employer and diversity commitment
Reasonable accommodation for employees with disabilities, absent undue hardship