Job description

Title: Application Security Consultant Location: NYC NY On-site/Remote/Hybrid: Onsite Duration: 12+ Months Interview Process: Web or In person interview No of submissions: No of Positions: 1 Job Description: The Application Security Consultant role is an on-premises position. The consultant will provide specialized security expertise to support product teams, product owners, infrastructure, and cybersecurity leadership. This role strengthens application security across the SDLC and DevOps through assessments, secure architecture reviews, tooling optimization, and operational governance. The consultant will also play a key role in onboarding, configuring, tuning, and monitoring protections across Akamai and Cloudflare WAF platforms, ensuring consistent security coverage across high‐value, cloud‐hosted, and externally facing applications. Additionally, the consultant is expected to perform technical assessments, enabling development teams through tooling and coaching, and helping establish repeatable processes, metrics, and governance. Technical Skills • 5+ years Hands‐on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush). • 4+ Hands‐on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing). • Deep understanding of OWASP Top 10, application security principles, secure development practices. • 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents. • Experience analyzing HTTP traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.). • Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures. • Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics. About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18+ years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Requirements

Must-haves

Title: Application Security Consultant
Location: NYC NY
On-site/Remote/Hybrid: Onsite
Duration: 12+ Months
Interview Process: Web or In person interview
No of Positions: 1
Additionally, the consultant is expected to perform technical assessments, enabling development teams through tooling and coaching, and helping establish repeatable processes, metrics, and governance.
Technical Skills
5+ years Hands‐on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush).
4+ Hands‐on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing).
Deep understanding of OWASP Top 10, application security principles, secure development practices.
5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
Experience analyzing HTTP traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.).
Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureaws

Platform: jobdiva
Effort: medium