Senior Application Security Engineer
$110/h-$140/h
12 days ago
Highlight
RemotePart-timeSenior
Summary
RevolutionCyber is seeking a Senior Application Security Engineer to join their team as a part-time contractor, working remotely in the United States. The role focuses on supporting security initiatives and ensuring the integrity of applications and services.
About the Role
As a Senior Application Security Engineer, you will be responsible for managing security vulnerabilities, collaborating with developers, conducting security training, and overseeing vulnerability reporting platforms. You will also perform gap analysis, recommend tools for metrics reporting, and engage with leadership to support program development.
About You
Required:
- Bachelor's degree in Computer Science, Information Security, or a related field preferred or industry certifications.
- Minimum of 5 years of experience in application security engineering.
- Proven experience with AWS security practices.
- Proficiency with security tools such as CSPM, SAST, DAST, Vulnerability Management Tools.
- Experience managing vulnerability reporting platforms like bug bounty programs and GitHub Advanced Security.
- Strong understanding of CVEs, Software Composition Analysis (SCA), and vulnerability management processes.
- Experience with Jira for ticketing and project management.
Preferred:
- GCP experience.
- Familiarity with software development practices and secure coding principles.
- Background in software development.
Benefits
- Immediate impact on high-profile projects.
- Flexible engagement as a remote 1099 contractor with potential for full-time transition.
- Opportunities for professional growth and skill enhancement.
RevolutionCyber
RevolutionCyber is a boutique cyber security and resilience consulting firm that blends strategic advisory, cultural transformation, and technology enablement to redefine how organizations approach security. We focus on aligning security with business outcomes, such as resilience, trust, and revenue generation, rather than treating it as a standalone technical function. The company lives at the intersection of security culture, operational resilience, and customer trust, making it a unique hybrid between a traditional consulting firm, a managed security service provider (MSSP), and a technology-enabled service provider.
Ohio, United States