Senior Application Security Consultant

ABOUT KALLES GROUP:Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.WHAT YOU WILL DO: As a Senior Application Security Consultant, you will help our client strengthen application security by leading comprehensive security assessments across internally developed and third-party applications. Working closely with software engineers, architects, product teams, and security professionals, you will identify security risks early in the development lifecycle and help teams build secure solutions by design.This role blends technical expertise with collaboration and innovation. You will establish and evolve security assessment methodologies, leverage automation and AI-enabled capabilities to improve assessment efficiency, and provide actionable guidance that enables engineering teams to reduce risk while maintaining development velocity. You will also contribute to secure design standards, threat modeling activities, and continuous improvement initiatives that elevate application security across the organization.KEY RESPONSIBILITIES: Perform comprehensive security assessments for internally developed and third-party applicationsPartner with engineering, product, and architecture teams to identify security risks during application design and developmentConduct secure design reviews and provide security approval recommendations for new and existing solutionsDevelop and enhance standardized security assessment methodologies, frameworks, and best practicesUtilize AI-enabled tools and automation to improve assessment efficiency, threat modeling, compliance validation, and software supply chain analysisDocument assessment findings and deliver practical, risk-based remediation recommendationsValidate remediation efforts and verify that identified security issues have been successfully addressedDevelop reusable secure design patterns and security guidance for engineering teamsMonitor emerging threats, vulnerabilities, and evolving application security practicesCollaborate with cross-functional stakeholders to embed security throughout the software development lifecycleContribute to continuous improvement initiatives within the organization's application security programABOUT YOU:Your values:Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.YOUR EXPERIENCE:Required Qualifications8+ years of experience in cybersecurity with significant hands-on experience performing application security assessmentsStrong understanding of secure software development practices, secure design principles, and vulnerability managementExperience performing threat modeling and secure architecture reviewsHands-on experience with application security testing technologies including SAST, DAST, SCA, and related security platformsExperience assessing cloud-native applications running in AWS, Azure, or Google Cloud PlatformKnowledge of APIs, modern application architectures, and secure software development methodologiesExperience developing security standards, assessment methodologies, or security review processesStrong written and verbal communication skills with the ability to influence engineering and product teamsAbility to prioritize security risk and communicate remediation strategies to both technical and business stakeholdersBachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent professional experiencePreferred QualificationsProfessional certifications such as CISSP, OSCP, CSSLP, CCSP, CISA, or similarExperience applying AI or large language model (LLM) technologies to application security workflowsExperience building security automation or AI-assisted assessment capabilitiesExperience working within a formal Design Review or Security Architecture review processExperience with DevSecOps practices, CI/CD security integration, or developer security enablementExperience mentoring engineers and promoting secure-by-design principles across development organizationsWHAT WE OFFER:The annual salary range for this role is $110,000-$140,000. We offer Medical, Dental, Vision plans, 401K with matching, and PTO for salaried employees.Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.LOCATION:This role is on-site at our client location in Seattle, WA. At this time, we are only considering candidates who currently live in Seattle, WA. HOW TO APPLY: Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to View email address on click.appcast.io Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.