Senior Consultant, Application Security Penetration Tester

4 days ago

Apply Now

Receive Emails with Similar Jobs

Coalfire

WebsiteLinkedInAll Job Openings

Coalfire is a cybersecurity services provider that helps businesses improve their security resilience and streamline regulatory compliance. The company offers expert-led services, including threat-focused cybersecurity programs, compliance automation, risk management, and security advisory services across various industries such as financial services, healthcare, retail, and technology. Coalfire is known for its hacker and defender expertise, and its platforms are designed to fortify clients' cyber resilience, reduce attack surfaces, and accelerate the achievement of compliance objectives like FedRAMP and HITRUST.

IT Audits and Risk Asessments • Penetration Testing • PCI-DSS / PA-DSS Compliance Assessments • HIPAA / HITECH / HITRUST Assessments • FFIEC Controls Assessments

1001 - 5000 employees

Founded 2001

🔒 Cybersecurity

📋 Compliance

🏢 Enterprise

📋 Description

• Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. • We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. • We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world. • We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference. • The Senior Consultant works closely with Project Managers, Delivery Directors, and other Delivery team members to lead engagements, assessing the security of various types of client applications and supporting infrastructure against security best practices. • The Senior Consultant is a technical leader with broad and deep technical skills, meeting the objectives of their engagements, collaborating with clients, mentoring teammates, and providing subject matter expertise across one or more technical domains. • The Senior Consultant is a trusted advisor to clients, and through objective testing and results reporting, supports the client in making well-informed, risk-based decisions to improve overall security posture.

🎯 Requirements

• Application penetration testing and assessment tradecraft and methodologies (including browser-based, API) • Strong working knowledge of at least two programming or scripting languages • Strong understanding of security principles and industry best practices. • Minimum of 5 years’ experience in a consulting/professional services role • Minimum of 5 years’ experience in Application Security and/or Software Development • Expert proficiency in Web Application Penetration Testing • Excellent overall technical skills, with strong expertise in at least one of the following: Mobile Application Penetration Testing, Thick Application Penetration Testing, Hardware Penetration Testing, Secure Code Review, Container Penetration Testing, Cloud Penetration Testing, Network Active Directory Penetration Testing, AI Penetration Testing • Excellent consulting skills including, time management, performing adjacent tasks while ensuring on-time delivery, escalating issues as needed • Verbal communication, leading client calls for project kickoffs and debrief • Written communication & Report writing, for both executive audiences and technical staff • High school diploma required

🏖️ Benefits

• Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options