RemoteLeaf Logo
Log in Sign up

Principal Technical Consultant – Cloud and Application Security

1 month ago
United States
Full-time
Lead
Application Security Engineer
DevOps and Infrastructure
AWS Azure Bash DevSecOps Docker GCP GraphQL Kubernetes PowerShell Python REST API Sentinel Serverless SIEM Splunk Terraform Vertex AI
Apply Now
AHEAD

AHEAD

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help...

IT Services
1K-5K
$43M raised
View All Jobs 83

Description

  • Lead strategy, roadmap, design, and planning workshops for client engagements.
  • Execute project objectives, requirements gathering, milestones, dependencies, timelines, and status reporting.
  • Create, finalize, peer-review, and present project deliverables.
  • Define and operationalize application security delivery plans, including secure SDLC controls, risk prioritization, developer enablement, metrics, and executive reporting.
  • Lead application security and threat modeling workshops covering secure architecture, abuse cases, API risks, and remediation planning.
  • Troubleshoot complex technical issues and guide engagements toward successful outcomes.
  • Support business development through discovery meetings, project scoping, proposal development, and client presentations.
  • Lead client visioning and discovery workshops to identify cross-practice opportunities.
  • Develop and standardize security service offerings, enable service capabilities, and contribute to go-to-market initiatives.
  • Provide technical thought leadership, mentorship, and practice development.

Requirements

  • 10+ years of consulting or commensurate work experience and 3+ years of leadership experience.
  • 5+ years of hands-on experience with CNAPP tools; Wiz experience preferred.
  • 5+ years of experience with GCP and cloud-native services; AWS and Azure experience is optional.
  • Expertise in cloud security architecture, secure reference architectures, Zero Trust, network segmentation, multi-cloud governance, IaC, and policy-as-code.
  • Experience with CNAPP, ASPM, SAST, DAST, SCA, secrets detection, container security, and code-to-cloud traceability.
  • Strong DevSecOps, secure coding, threat modeling, API security, and secure CI/CD pipeline experience.
  • Proficiency with Python, PowerShell, and/or Bash, plus Terraform, Bicep, AWS CloudFormation, OPA, or Sentinel.
  • Experience with cloud identity and access management, including IAM, federation, RBAC, Okta, and Entra ID.
  • Knowledge of security frameworks and standards such as CIS Benchmarks, NIST, FedRAMP, ISO 27001, GDPR, OWASP SAMM, and DSOMM.
  • Excellent communication, presentation, problem-solving, interpersonal, business acumen, and executive presence; a related undergraduate degree and certifications such as CISSP, CCSP, CSSLP, GIAC, or OSCP are preferred.

Benefits

  • On-target earnings consisting of base salary and applicable target bonus, varying by experience, qualifications, and location.
  • Medical, dental, and vision insurance.
  • 401(k) plan.
  • Paid company holidays and paid time off.
  • Paid parental and caregiver leave.
  • Cross-department training and development opportunities.
  • Sponsored certifications and credentials for continued learning.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Bugcrowd

Product Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a Security Engineer to partner with engineering and product teams remotely, building secure-by-default systems and driving measurable application security outcomes.

Costa Rica Full-time Mid Level Application Security Engineer
AWS Docker GCP Go Java Kubernetes Python Ruby Terraform
4 days, 19 hours ago
Cleo

Staff Application & Product Security Engineer

Cleo 251-1K Internet Software & Services

Cleo is hiring a Staff Application Security Engineer to own secure product development and the security posture of its SaaS and customer-hosted products, partnering with engineering and security teams from design through release.

United States Full-time Lead Application Security Engineer
$160k-$180k
AWS Burp Suite CI/CD GitHub Go Java Jenkins Kubernetes Penetration Testing Python SAML Terraform TypeScript
4 days, 20 hours ago
Bugcrowd

Application Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is seeking an Application Security Engineer to triage and validate vulnerability submissions across client bug bounty programs, communicate with researchers and customers, and escalate critical security incidents.

Brazil Full-time Mid Level Application Security Engineer
Burp Suite Nmap
1 week, 5 days ago
Alphasense

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is seeking a Senior Product Security Engineer to secure its AI-native market intelligence platform by embedding AI/ML security, secure architecture, and assurance practices throughout product development.

Canada Full-time Senior Application Security Engineer
$118k-$162k
CI/CD DevSecOps Java JavaScript Kubernetes OpenID Connect Python SAML Secrets Management TLS
1 week, 5 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers