JobCubby JobCubby
Sign up
Tri-Force Consulting Services, Inc.

Application Security Consultant(5896-1)

Tri-Force Consulting Services, Inc. New York, New York, United States

IT System Custom Software Development · 51-200 employees

5 d ago
security Senior (5-10 yrs) Contractor United States
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The consultant will provide specialized security expertise to support product teams and infrastructure by strengthening application security across the SDLC and DevOps. They are responsible for onboarding, configuring, and monitoring protections across Akamai and Cloudflare WAF platforms while performing technical assessments.

What they look for

Cloudflare WAF Akamai WAF OWASP Top 10 SAST DAST SCA Checkmarx BurpSuite Fortify HTTP traffic analysis Azure AWS SaaS SIEM SOAR DevOps

Requirements

Candidates must have over 5 years of hands-on experience with Cloudflare and Akamai WAF platforms. A deep understanding of application security principles, OWASP Top 10, and experience with security scanning tools like SAST/DAST/SCA is required.

Full description

Job Title: Application Security Consultant (5896-1)

Location: 2 Broadway - MTA Headquarters

Note: This is an on-site position.

Job Description:

  • The application security consultant role is an on-premises position.
  • The consultant will provide specialized security expertise to support product teams, product owners, infrastructure, and cybersecurity leadership.
  • This role strengthens application security across the SDLC and DevOps through assessments, secure architecture reviews, tooling optimization, and operational governance.
  • The consultant will also play a key role in onboarding, configuring, tuning, and monitoring protections across Akamai and Cloudflare WAF platforms, ensuring consistent security coverage across high‑value, cloud‑hosted, and externally facing applications.
  • Additionally, the consultant is expected to perform technical assessments, enabling development teams through tooling and coaching, and helping establish repeatable processes, metrics, and governance.

Technical Skills

1. 5+ years Hands‑on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush).

2. 4+ Hands‑on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing).

3. Deep understanding of OWASP Top 10, application security principles, secure development practices.

4. 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.

5. Experience analyzing HTTP traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.).

6. Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.

7. Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.

About Us:

Since 2000, Tri-Force Consulting Services (https://triforce-inc.com) has been an MBE/SDB certified IT Consulting

firm in the Philadelphia region. Tri-Force specializes in IT staffing, software development (web and mobile apps),

systems integration, data analytics, system automation, cybersecurity, and cloud technology solutions for government

and commercial clients. Tri-Force works with clients to overcome obstacles such as increasing productivity,

increasing efficiencies through automation, and lowering costs. Our clients benefit from our three distinguishing

core values: integrity, diligence, and technological excellence.

Tri-Force is a six-time winner among the fastest-growing companies in Philadelphia and a four-time winner on the

Inc. 5000 list of the nation's fastest-growing companies.

Similar roles