Principal Consultant - Application Security

4 days ago

Apply Now

Receive Emails with Similar Jobs

Coalfire

WebsiteLinkedInAll Job Openings

Coalfire is a cybersecurity services provider that helps businesses improve their security resilience and streamline regulatory compliance. The company offers expert-led services, including threat-focused cybersecurity programs, compliance automation, risk management, and security advisory services across various industries such as financial services, healthcare, retail, and technology. Coalfire is known for its hacker and defender expertise, and its platforms are designed to fortify clients' cyber resilience, reduce attack surfaces, and accelerate the achievement of compliance objectives like FedRAMP and HITRUST.

IT Audits and Risk Asessments • Penetration Testing • PCI-DSS / PA-DSS Compliance Assessments • HIPAA / HITECH / HITRUST Assessments • FFIEC Controls Assessments

1001 - 5000 employees

Founded 2001

🔒 Cybersecurity

📋 Compliance

🏢 Enterprise

📋 Description

• Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. • We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. • We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference. • The Principal Consultant is considered a subject matter expert in both Application Security and Application Penetration Testing. • The Principal is a technically proficient individual contributor with broad and deep technical skills, meeting the objectives of their engagements, collaborating with clients, mentoring teammates, and providing subject matter expertise across one or more technical domains. • The Principal is a trusted advisor to clients, and through objective testing and results reporting, supports the client in making well-informed, risk-based decisions to improve overall security posture. • Principals are expected to continue to deepen their skills and broaden their impact both directly with our clients as well as contribute to internal initiatives at Coalfire.

🎯 Requirements

• 7+ years experience in an Information Security consulting role with growing level of practice/subject matter responsibility including singular expertise in Application Security (browser-based, API’s, mobile applications, etc.) • Expert proficiency in Web Application Penetration Testing • Excellent overall technical skills, with strong expertise in at least one of the following: - Mobile Application Penetration Testing - Thick Application Penetration Testing - Hardware Penetration Testing - Secure Code Review - Container Penetration Testing - Cloud Penetration Testing - Network Active Directory Penetration Testing - AI Penetration Testing • Proven thought leadership and desire to tackle complex problems, as shown through: - Building custom tooling and scripts - Coming up with novel approaches to existing problems - Mentoring and helping other staff members - Writing blog posts - Speaking at conferences - Development and support of a consulting practice including delivery of services in one or more of the above areas of expertise. • Excellent consulting skills including: - Time management, performing adjacent tasks while ensuring on-time delivery, escalating issues as needed - Verbal communication, leading client calls for project kickoffs and debrief - Written communication - Report writing, for both executive audiences and technical staff • High school diploma required

🏖️ Benefits

• Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options