View source for Web Application Security Consultant, Aspect Security, Inc

Title: Web Application Security Consultant 

Location: Columbia, MD 

Company: Aspect Security, Inc. 

Link to Apply: https://www.aspectsecurity.com/about/careers/

Description: Aspect Security, a leading provider of application security services, is seeking individuals who want to join a highly skilled team dedicated to helping clients improve their application security posture.  As an Application Security Engineer you will primarily be responsible for working with a team to execute planned client projects and may be called upon to support internal projects and pre-sales efforts.  An Application Security Engineer possesses solid consulting and technical skills. Candidates must be willing to travel.

Key Tasks:

•	Work with development teams to carry out Application Security Reviews; Performs threat modeling, vulnerability analysis, penetration testing, code reviews, and SDLC support.

•	Provide consultancy to customers on risk assessment, threat modeling and vulnerability remediation.

•	Design, implement, and support security-focused tools and services.

•	Evangelize security and be an advocate for a positive approach to application security.

•	Write technical reports based on findings.

Qualifications: 

Technical Skills 

o	Demonstrated proficiency with development frameworks and languages (Java, C/C++, .NET, C#). 

o	Experience writing secure code.

o	Experience working with development team(s) that delivered commercial software or software-based services (development, QA testing, or security role). 

o	Familiarity with common application security tools, experience working with common tools is ideal. (Fortify, AppScan, WebInspect etc.)

Consulting Skills 

o	Identify and communicate risks to team lead(s) and project manager.

o	Strong written and verbal communication.

o	Comfort level in customer facing situations.

o	Critical thinking and problem solving.

Education and Experience

o	BS in Computer Science or equivalent required, MS preferred.

o	2-3 years programming experience. 

o	Knowledge of or exposure to secure development practices and techniques including OWASP Top Ten with a strong desire to learn more.