Applications and APIs Security Lead Consultant

Lead application and API exposure intelligence across web applications, authentication flows, and security testing signals. Prioritize vulnerabilities by exploitability and business risk, identify attack paths, and partner with engineering teams to guide remediation and reduce recurring security exposures.

Responsibilities

• Translate application security findings into exposure intelligence and prioritize them based on exploitability and business risk.
• Identify attack paths involving authentication flaws, insecure APIs, weak session handling, and privilege boundaries.
• Provide remediation guidance and work with application owners to validate closure.
• Serve as the subject matter expert for web, application, and API exposures, including OWASP risks and API misuse.
• Identify systemic security patterns such as broken authentication, insecure direct object references, injection paths, weak access controls, and insecure secrets handling.
• Partner with development teams and App
• Sec stakeholders to improve secure patterns and reduce recurring exposures.

Required Skills

• Application Programming Interface (API) Security
• Application Security
• Application Vulnerability Management
• Authentication
• Web Application Security
• Web Security
• SASTDASTOAuth/OIDCSecure Software Development Lifecycle