RemoteLeaf Logo
Log in Sign up

Principal Technical Consultant – Cloud and Application Security

1 day, 15 hours ago
United States
Full-time
Lead
Application Security Engineer
DevOps and Infrastructure
AWS Azure Bash DevSecOps Docker GCP GraphQL Kubernetes PowerShell Python REST API Sentinel Serverless SIEM Splunk Terraform Vertex AI
Apply Now
AHEAD

AHEAD

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help...

IT Services
1K-5K
$43M raised
View All Jobs 92

Description

  • Lead strategy, roadmap, design, and planning workshops for client engagements.
  • Execute project objectives, requirements gathering, milestones, dependencies, timelines, and status reporting.
  • Create, finalize, peer-review, and present project deliverables.
  • Define and operationalize application security delivery plans, including secure SDLC controls, risk prioritization, developer enablement, metrics, and executive reporting.
  • Lead application security and threat modeling workshops covering secure architecture, abuse cases, API risks, and remediation planning.
  • Troubleshoot complex technical issues and guide engagements toward successful outcomes.
  • Support business development through discovery meetings, project scoping, proposal development, and client presentations.
  • Lead client visioning and discovery workshops to identify cross-practice opportunities.
  • Develop and standardize security service offerings, enable service capabilities, and contribute to go-to-market initiatives.
  • Provide technical thought leadership, mentorship, and practice development.

Requirements

  • 10+ years of consulting or commensurate work experience and 3+ years of leadership experience.
  • 5+ years of hands-on experience with CNAPP tools; Wiz experience preferred.
  • 5+ years of experience with GCP and cloud-native services; AWS and Azure experience is optional.
  • Expertise in cloud security architecture, secure reference architectures, Zero Trust, network segmentation, multi-cloud governance, IaC, and policy-as-code.
  • Experience with CNAPP, ASPM, SAST, DAST, SCA, secrets detection, container security, and code-to-cloud traceability.
  • Strong DevSecOps, secure coding, threat modeling, API security, and secure CI/CD pipeline experience.
  • Proficiency with Python, PowerShell, and/or Bash, plus Terraform, Bicep, AWS CloudFormation, OPA, or Sentinel.
  • Experience with cloud identity and access management, including IAM, federation, RBAC, Okta, and Entra ID.
  • Knowledge of security frameworks and standards such as CIS Benchmarks, NIST, FedRAMP, ISO 27001, GDPR, OWASP SAMM, and DSOMM.
  • Excellent communication, presentation, problem-solving, interpersonal, business acumen, and executive presence; a related undergraduate degree and certifications such as CISSP, CCSP, CSSLP, GIAC, or OSCP are preferred.

Benefits

  • On-target earnings consisting of base salary and applicable target bonus, varying by experience, qualifications, and location.
  • Medical, dental, and vision insurance.
  • 401(k) plan.
  • Paid company holidays and paid time off.
  • Paid parental and caregiver leave.
  • Cross-department training and development opportunities.
  • Sponsored certifications and credentials for continued learning.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

TherapyNotes

Cyber Security Engineer (Application Security)

TherapyNotes 51-250 Health Care Providers & Services

TherapyNotes is seeking a hands-on Cyber Security Engineer to own application security across the SDLC and CI/CD pipeline for its healthcare-regulated behavioral health SaaS platform.

United States Full-time Senior Application Security Engineer
$110k-$150k
AWS Azure CI/CD Cybersecurity GitHub Actions HIPAA SIEM Terraform
16 hours, 22 minutes ago
vivenu

Senior Security Engineer - AppSec (d/f/m)

vivenu 51-250 Media

vivenu is hiring a Senior Security Engineer focused on AppSec to build and scale a security program for its API-first live entertainment ticketing platform and global cloud infrastructure.

Germany Full-time Senior Application Security Engineer
Argo CD AWS Azure CI/CD GCP GitHub Actions GitOps Go Kubernetes Penetration Testing Terraform TypeScript
1 day, 16 hours ago
Aledade

Senior Security Engineer II - Application Security

Aledade 1K-5K Health Care Providers & Services

Aledade PBC is hiring a Senior Security Engineer II to design, automate, and operate security services that protect its healthcare technology environment while partnering across teams to improve the organization’s security posture.

United States Full-time Senior Application Security Engineer
AWS Azure C# C++ DevSecOps GCP Go Java JavaScript Machine Learning Python R Scala Terraform
3 days, 15 hours ago
MyFitnessPal

Application Security Engineer

MyFitnessPal 10K-50K Health Care Providers & Services

MyFitnessPal is hiring a Security Engineer II to protect the code, applications, and development processes behind its mobile and backend health platform by operating application security programs and building security automation.

United States Full-time Junior Application Security Engineer
$90k-$130k
CI/CD GitHub Actions Kubernetes Penetration Testing Python
3 days, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers