Haystack
← Back to Jobs
Technology
IC

Application Security Consultant ( F2F Interview at New York, NY)

Innovee Consulting LLCNew York, NY🇺🇸United StatesPosted Oct 9, 2026

Why This Role Stands Out

This hybrid Application Security Consultant role at Innovee Consulting LLC offers a fantastic opportunity to deepen your expertise in securing the software development lifecycle and collaborate with diverse teams. You'll thrive here if you're a skilled professional eager to enhance application security through assessments, architecture reviews, and operational governance. Apply today to join a dynamic environment and make a significant impact.

Quick Overview

Seniority
Mid Senior
Work mode
Hybrid
Location
New York, NY, United States
Posted
4 days ago

Job Description

Role: Application Security Consultant

Location: 2 Broadway, New York, NY

Duration: Long Term

F2F Interview at New York, NY

Job Description:

The Application Security Consultant role is an on-premises position. The consultant will provide specialized security expertise to support product teams, product owners, infrastructure, and cybersecurity leadership. This role strengthens application security across the SDLC and DevOps through assessments, secure architecture reviews, tooling optimization, and operational governance. The consultant will also play a key role in onboarding, configuring, tuning, and monitoring protections across Akamai and Cloudflare WAF platforms, ensuring consistent security coverage across high‑value, cloud‑hosted, and externally facing applications.

Additionally, the consultant is expected to perform technical assessments, enabling development teams through tooling and coaching, and helping establish repeatable processes, metrics, and governance.

Technical Skills:

  • 5+ years Hands‑on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush).
  • 4+ Hands‑on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing).
  • Deep understanding of OWASP Top 10, application security principles, secure development practices.
  • 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
  • Experience analyzing HTTP traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.).
  • Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
  • Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.

Additional Skills:

  • Database Security —  2–4 years
  • Information Security —  4–6 years
  • Java — 1–2 years
  • Power App — 2–4 years
  • .NET Code Development — 4–6 years
  • IT Architecture — 2–4 years
  • Web Development — 2–4 years

Similar jobs