Application Security Consultant, Professional Services (AI)

Location: Remote in the Contiguous US

Company

hirify.global provides application security consulting and professional services for enterprise clients.

What you will do

• Deliver red team projects and business-focused technical testing for diverse Fortune 1000 clients.
• Assess web applications, APIs, mobile applications, and AI-enabled applications.
• Perform threat analysis by identifying critical assets, services, threat actors, and likely threat events.
• Conduct reconnaissance, prepare assessments, document findings, and interview customers.
• Document security weaknesses with reproduction steps, analyze risk and root cause, and propose practical remediation.

Requirements

• Apply OWASP ASVS, relevant OWASP Top 10 frameworks, OSSTMM, and the MITRE ATT&CK Framework.
• Demonstrate ethical and critical thinking, analytical ability, and the ability to think like a threat actor or attacker.
• Have involvement in security-related projects or communities, including CTFs.
• Interact professionally with customers and maintain a client-first mindset.
• Demonstrate a flexible, self-sufficient, performance-driven work ethic and the ability to work both independently and as part of a team.
• Hold an OSWE certification or an equivalent advanced-level certification.
• Have experience as a penetration tester and vulnerability assessor.
• Have excellent report-writing and consultative skills.
• Be able to sit for prolonged periods at a desk, work on a computer, and lift up to 15 pounds when required.

Nice to have

• Bachelor’s degree in Computer Science, Computer Information Systems, or an equivalent qualification.
• Network-layer penetration testing experience involving external and internal client networks.
• Knowledge of Active Directory attacks, adversary-in-the-middle attacks, and relay-based attacks in Windows networks.
• Experience with password spraying, password cracking, obfuscation and encoding to bypass controls, and bypassing advanced EDR solutions.
• Experience conducting social engineering exercises under defined Rules of Engagement.
• Experience conducting wireless penetration tests against modern wireless networks.
• Other offensive security certifications.
• Network testing skills.

Culture & Benefits

• Remote work from the contiguous United States.
• Professional services work with diverse Fortune 1000 clients.
• Equal employment opportunities and a workplace that values diversity.
• Reasonable accommodations are available for employees with disabilities when requested.