Senior Application Security Consultant

Work schedule: Hybrid role Monday/Friday remote. Tuesday-Thursday in office

Shift: 8am-5pm (with a possible half day on Fridays since it is only for 35 hours a week)

In this role, you will be the key person responsible for advancing an enterprise-grade application security program. You will lead the design and operation of security capabilities protecting web, mobile, and cloud-native applications while embedding cybersecurity requirements into the heart of the development lifecycle. This is an ideal position for a strategic security professional who excels at balancing risk-based analysis with high-performance delivery in a fast-paced AWS environment.

What You'll Be do

• Lead the implementation of secure architecture reviews and security controls for AWS Lambda and cloud-native services within CI/CD pipelines.
• Administer and optimize Checkmarx static code scanning, conducting vulnerability triage and remediation based on OWASP Top Ten risks.
• Manage and tune application layer protection technologies to improve detection capabilities without impacting customer experience or performance.
• Partner with Release Management and SRE teams to coordinate secure production deployments and ensure go-live stability.
• Act as the security subject matter expert in architectural discussions, ensuring cybersecurity is embedded early in new project designs.

Important:

This is a temporary/contract position with no benefits such as health insurance, retirement plans, or paid time off during the contract period/

What We're Looking For:

• A seasoned Cybersecurity professional with broad experience in secure development, code analysis, and cloud-native protection.
• Proven expertise in administering static analysis tools (Checkmarx preferred) and securing AWS runtime resources.
• Strong knowledge of OWASP Top Ten, web/mobile security vulnerabilities, and modern remediation strategies.
• Experience working in a Site Reliability Engineering (SRE) capacity to ensure secure and stable production releases.
• An effective communicator who can provide risk-based security recommendations to both technical engineering teams and business stakeholders.
• Ability to work effectively in either a Hybrid (Parsippany, NJ) or fully Remote capacity as required by the specific opening.

RightStone is a strategic partner that works with our clients to place the highest caliber of talent for a wide range of industries and skill sets. For over 23 years, RightStone has assisted organizations in attracting, recruiting, and placing qualified candidates quickly for contract, contract-to-hire, and direct hire opportunities. The right candidates are the most critical aspect of who RightStone is. If you are the candidate we are interested in speaking with, we would like to hear from you.