Cyber Security Consultant

Senior Cyber Security Consultant
Duration: 5 months
Minnesota - Forest Lake
Required Minimum Qualifications:

• Minimum 10 years' experience as an application security.
• Required Certifications: Certified Ethical Hacker (CEH), CCNA, CCNP, or F5 specific certification.

Required Skills:

• Experience with Application Security tools (static code analysis, dynamic scanning, WAF, etc.)
• Experience and familiarity with widely accepted vulnerability frameworks and guidance (i.e., CVSS, OWASP, NIST, etc.)
• Demonstrable experience scripting with languages like Python, PowerShell, bash, etc. to create and automate security controls
• Familiarity with technical security controls, guidelines, and frameworks outlined by standards such as SOC2, ISO 27001/27013, NIST 800-53
• Serve as a subject matter expert on internal product security engineering questions/requests
• A deep understanding of web application architecture
• Detailed understanding of common web application deployment models and components
• Have a knack for finding flaws in software and can efficiently communicate how to fix them
• Demonstrable experience scripting with languages like Python, PowerShell, bash, etc. to create and automate security controls
• Proven ability to communicate and educate engineering and architecture teams as to why security efforts are necessary and add value
• Can think like an attacker and use that context to develop threat models
• Build and automate secure SDLC controls and best practices in an agile environment
• Ability to consider the context of the organization and environment to properly prioritize issues
• Ability to work well with other teams/functions with a positive attitude and respect
• Work with Application and Infrastructure Engineering teams to help design secure products
• Work with developers to prioritize and remediate identified security vulnerabilities
• Lead efforts to implement and maintain security policies and remediation processes
• Perform proactive research to detect new attack vectors
• Provide regular dashboard and rollout reporting

Nice to have

• MS in Cyber Security and BA in Information Systems.