Senior Application Security Specialist

Company Description Cyber Vanguard Technologies (CVX) tackles complex challenges in defense and cyberspace, delivering advanced solutions to customers worldwide. The organization focuses on securing critical systems and infrastructure against rapidly evolving threats. CVX values innovation, technical excellence, and mission-focused collaboration. Team members work on impactful projects that strengthen cybersecurity resilience across diverse industries. The company offers opportunities to contribute to cutting-edge security initiatives with global reach.

Role Description The Senior Application Security Specialist is a remote, contract role responsible for strengthening the security posture of CVX’s applications and services. This position conducts security assessments, code reviews, and threat modeling for web, mobile, and cloud-based applications, identifying vulnerabilities and recommending remediation strategies. The specialist collaborates with engineering, DevOps, and product teams to integrate security best practices into the software development lifecycle and support secure architecture design. Day-to-day tasks include developing and maintaining secure coding guidelines, creating and executing security test plans, and reviewing security configurations in CI/CD pipelines. The role also involves monitoring security trends, mentoring developers on application security practices, and contributing to incident response efforts related to application-layer threats.

Qualifications

• Experience with application security testing methods and tools (e.g., SAST, DAST, dependency scanning, fuzzing) and the ability to interpret and prioritize findings.
• Strong knowledge of secure software development practices, including secure coding principles, code review techniques, and integration of security into CI/CD pipelines.
• Familiarity with common vulnerability classes and frameworks (e.g., OWASP Top 10, CWE, CVE), and practical experience remediating issues across web and API-based services.
• Understanding of cloud security concepts and controls for major cloud providers (e.g., AWS, Azure, GCP), including identity, access management, and application-layer protections.
• Ability to perform threat modeling and risk assessments, and to communicate security risks and recommendations clearly to technical and non-technical stakeholders.
• Relevant certifications or training in application or information security (e.g., CSSLP, OSCP, CEH, GIAC) are beneficial.
• Previous experience in defense, critical infrastructure, or high-security environments is a plus, as is experience working in distributed, remote teams.
• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.