Application Security Consultant

About Forward Security

Forward Security is at the forefront of Application and Cloud Infrastructure Security, delivering tailored security solutions to medium-sized businesses in finance, health, e-commerce, and technology. We pride ourselves on fostering a culture of collaboration, excellence, and innovation. Our progressive approach emphasizes results over rigid schedules, offering you the flexibility to balance work with your lifestyle.

Role Overview

The Application Security Consultant plays a crucial role in delivering high-quality security services. You will work with clients to design secure applications, perform threat modeling, and conduct penetration testing, all while driving the growth and improvement of our security offerings.

Key Responsibilities

• Provide application security services including design review, threat modelling, and pentesting of web, mobile, or desktop applications using automation tools as well as manual methods.
• Create and deliver application security design documents and risk assessment reports.
• Design application security solutions to meet clients’ needs. Review issues identified and related remediation with clients and assist with implementation.
• Provide peer reviews and assist with projects assigned to other team members
• Assist with Cloud Infrastructure security and engagements in other domains as appropriate.

Minimum Qualifications

Please apply only if you meet the following criteria:

• Bachelor’s degree in Computer Science, Computer Engineering, or a related field.
• 2+ years of professional experience in Application Security, with hands-on expertise in conducting threat modeling, penetration testing, and secure code reviews.
• 2+ years of software development experience in languages such as Java, JavaScript, C#, Python, or C/C++. API expertise is highly desirable.
• Strong understanding of secure software design principles and modern development methodologies.
• Proven ability to identify and mitigate security vulnerabilities, particularly those listed in the OWASP Top 10 and CWE Top 25.
• Experience with SAST, DAST, and other security analysis tools, as well as manual black-box and white-box testing methodologies.

Why Join Us?

• Flexible work environment: We support remote work and offer flexible hours to suit your lifestyle.
• Career growth: Be part of a growing company with opportunities to shape the future of cybersecurity.
• Collaborative culture: Work with a team that values excellence, openness, and community.

Application Instructions

If you meet the above qualifications and are passionate about application security, we want to hear from you. Please submit your resume and a brief cover letter detailing your relevant experience.