Technical Consultant - Application Security

CTG is seeking to fill a Technical Consultant – Application Security position for our client.

Location: Remote
Duration: 12 months

Duties:

• Guide clients in identifying, understanding, and addressing application security challenges, risks, and vulnerabilities across their application landscape.

• Apply deep technical expertise to integrate security controls throughout the Software/Application Development Lifecycle (SDLC), including design, build, test, and deployment phases.

• Lead and support Application Security Vulnerability Management activities, including triage of high-risk vulnerabilities, root cause analysis, and development of effective mitigation and remediation plans.

• Reduce and manage false positives from security testing tools while ensuring true risks are prioritized and addressed.

• Design and implement security guardrails and best practices as part of Application Modernization initiatives in multi-cloud environments.

• Collaborate with development, DevOps, and platform teams to embed security into CI/CD pipelines and DevSecOps workflows.

• Conduct or support threat modeling exercises to identify potential attack vectors and recommend appropriate controls.

• Provide guidance on secure coding standards, application security architecture, and risk-based decision-making.

• Prepare and deliver security assessments, findings, and recommendations to technical and non-technical stakeholders.

Skills:

• Strong expertise in Application Security principles and practices.

• In-depth knowledge of Threat Modeling, Secure SDLC, DevSecOps, and application security testing methodologies (SAST, DAST, IAST, SCA).

• Experience with vulnerability management processes, including risk scoring, prioritization, and remediation tracking.

• Hands-on experience implementing application security controls in cloud and multi-cloud environments (e.g., AWS, Azure, GCP).

• Familiarity with CI/CD tools, containerization, and modern application architectures.

• Ability to analyze complex security findings and translate them into actionable guidance for development teams.

Experience:

• 5+ years of experience in application security, secure software development, or a related technical security role.

• Proven experience supporting or leading application security initiatives within enterprise environments.

• Experience working with application modernization programs and cloud-native architectures is strongly preferred.

Education:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent professional experience.

• Relevant security certifications (e.g., CSSLP, GWAPT, OSCP, CISSP, or cloud security certifications) are a plus.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services for this role.

The expected base salary for this position ranges from $50.00 to $120.00/hour. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, market factors, and where applicable, licensure or certifications obtained. In addition to salary, a competitive benefit package is also offered.