Senior Application Security Consultant, Strategic Services- Remote (Anywhere in the U.S.)

Senior Application Security Consultant, Strategic Services – Remote (Anywhere in the U.S.) GuidePoint Security provides trusted cybersecurity expertise and solutions that help organizations make better decisions and minimize risk. This role focuses on application security services such as threat modeling, architecture reviews, and DevSecOps program assessments. Role Overview As a Senior Application Security Consultant within Strategic Services, you will deliver application security offerings to clients across various industries, communicate findings, produce comprehensive reports, and provide remediation guidance. You will also contribute to evolving service offerings and support marketing initiatives. Responsibilities Travel up to 10% Deliver Application Security services, including threat modeling, architecture reviews, and AppSec/DevSecOps program assessments Author comprehensive assessment deliverables tailored to technical and managerial audiences detailing technical execution, deficiencies, business impact, and remediation strategies Understand application security landscape, tools, methodologies, and frameworks such as OWASP SAMM, OWASP DSOMM, NIST SSDF, SLSA, NIST AI RMF, and MITRE ATLAS Apply deep knowledge of application security issues, mitigation strategies, and common security controls Analyze and understand complex application architectures Work directly within development teams and integrate security into the SDLC Assist with practice development, improve offerings, and mentor team members Contribute to marketing initiatives via research, speaking, writing, and tool development Foster client relationships by providing support, information, and guidance while managing concurrent client engagements Demonstrate a startup mentality with a highly driven, high-performance approach to work Qualifications Deep practical coding experience and knowledge of secure software development practices Hands‑on generative AI experience in automated workflows Direct experience in application security service offerings, including threat modeling, architecture reviews, and AppSec/DevSecOps program assessments Familiarity with application security controls, architectures, requirements, and industry standards Background in development or application architecture design, including secure implementation of cryptography, input validation, and exception management Operational DevSecOps experience Proficiency in JavaScript, shell, Python, Java, C++, PHP, or C#, and ability to translate security requirements into technical implementations Excellent writing, communication, and time‑management skills Minimum 6 years of experience in Application Security and/or Software Development, with at least 3 years specifically in Application Security Minimum 2 years of consulting services or internal security roles requiring effective communication with both technical teams and executive leadership Bachelor’s degree in a relevant discipline or equivalent experience Why GuidePoint GuidePoint Security has grown to over 1,000 employees since 2011, serving more than 4,200 customers, and maintaining core values that promote mentorship and collaboration. This role offers a unique chance to grow with a rapidly expanding company. Benefits Remote workforce primarily (U.S. based only, some travel may be required) Group medical insurance options: Zero‑deductible PPO plan (GuidePoint covers 90% of employee premiums and 70% for family plans) or high‑deductible plan with HSA (GuidePoint covers 100% of employee premiums and 75% for family plans); GPS contributes a lump sum ($500 per EE annually / $1,000 per family annually) Group dental insurance: GuidePoint covers 100% of employee premiums and 75% for family plans 12 corporate holidays and a Flexible Time Off (FTO) program Healthy mobile phone and home internet allowance Eligibility for retirement plan after 2 months at open enrollment Pet benefit option #J-18808-Ljbffr GuidePoint Security