Application Security Consultant
Summary
Application Security Consultant performing AI-assisted source code security assessments, manual secure code reviews, and SAST/SCA scans. Validates AI findings, eliminates false positives, and delivers remediation guidance and client reporting. Tooling spans Checkmarx, Fortify, Veracode, Snyk, Semgrep, SonarQube, and GitHub Copilot.
Job Description :
We are looking for an experienced Application Security professional with hands-on expertise in AI-driven source code security assessment, secure code review, and vulnerability analysis.
Key Responsibilities :
- Perform AI-assisted source code security assessments.
- Conduct manual secure code reviews and identify vulnerabilities.
- Validate AI-generated findings and eliminate false positives.
- Perform SAST, SCA, and vulnerability assessments.
- Provide remediation guidance and verify security fixes.
- Manage security assessments, reporting, and client communication.
Mandatory Skills :
- Application Security / Product Security
- AI-driven code scanning or AI-assisted code analysis
- Secure Code Review, SAST, and SCA
- OWASP Top 10, CWE, and CVSS
- Vulnerability validation and remediation
Tools :
- Checkmarx, Fortify, Veracode, Snyk, Semgrep, SonarQube, GitHub Copilot, or similar.
Note :
Hands-on experience with AI-assisted source code analysis is mandatory. General penetration testing or only running automated scanners is not sufficient.