Application & Platform Security Consultant

We are seeking an experienced Security Vulnerability Remediation Consultant to support the analysis, prioritization, and remediation planning of security vulnerabilities across a portfolio of enterprise applications and platforms.

The consultant will work closely with Security, Engineering, DevOps, Infrastructure, and IT teams to accelerate vulnerability reduction efforts and establish sustainable remediation practices.

The primary objective is to rapidly assess the current vulnerability backlog, identify high-impact remediation opportunities, define a prioritized execution roadmap, and enable engineering teams to efficiently reduce security risk.

Required Skills:

Security Expertise

· 8+ years in Application Security, Product Security, or Security Engineering.

· Strong understanding of:

o OWASP Top 10

o CVE/CVSS scoring

o Threat modeling

o Secure SDLC

o Vulnerability management programs

Platform & Infrastructure Security

Experience with:

· Linux (RHEL preferred)

· Container platforms (Docker/Kubernetes)

· Cloud and hybrid environments

· TLS/SSL hardening

· Identity and access management concepts

Application Security

Hands-on experience remediating:

· Java vulnerabilities

· Tomcat vulnerabilities

· Open-source dependency risks

· Container image vulnerabilities

· Configuration and protocol issues

DevOps & Automation

Knowledge of:

· CI/CD pipelines

· GitHub / GitLab

· Jenkins

· Infrastructure as Code

· Security scanning integration