Senior Application Security Consultant

Our Opportunity

Snyk is expanding our Professional Services team and hiring for a Senior Application Security Consultant. As part of the Professional Services team, you will work directly with our customers to help them improve their application security posture. In this role, you’ll be responsible for providing deep technical expertise, guidance, and hands-on assistance to our customers.

In addition, you will be responsible for providing pre-sales support to Sales and developing and promoting application security best practices along with Snyk’s products. As a Senior Application Security Consultant, you’ll develop blog posts and other thought leadership activities for Snyk, and work with R&D and Product Management to develop and test Snyk products. 

You’ll Spend Your Time:

• Deep Dive Analysis: Conduct in-depth analysis of Snyk scan results to identify potential vulnerabilities and security risks.
• Expert Recommendations: Provide actionable recommendations to remediate vulnerabilities, improve code quality, and enhance overall application security.
• Developer Coaching: Offer 1:1 coaching and training sessions to developers, imparting best practices in secure coding and application security principles.
• False Positive/Negative Triage: Efficiently triage and resolve false positives and negatives in Snyk scan results and source code, minimizing developer friction.
• Knowledge Sharing: Deliver engaging training sessions and workshops on various application security topics, both in-person and virtually.
• Pre-Sales Support: Collaborate with the sales team to provide technical expertise and guidance during the sales process.

What You’ll Need:

• 8+ years of industry experience, and experience as an application security consultant or in a similar role.

• Bachelor’s Degree (CS/IT/Eng/ITSec) or equivalent experience.
• Strong understanding of application security principles, vulnerabilities, and threat modeling.
• Deep knowledge of software development methodologies, including Agile and DevOps.
• Proficiency in multiple programming languages (e.g., Java, Python, JavaScript, C#) and scripting languages (e.g., Bash, PowerShell).
• Experience with Snyk or other application security tools.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical concepts to both technical and non-technical audiences.
• Passion for helping customers succeed and a desire to stay up-to-date with the latest trends in application security.

We’d be Lucky if You: 

• Have public speaking experience and a knack for delivering engaging presentations.
• Have a background in developer and/or engineering roles, providing a unique perspective on security challenges.
• Possess a deep understanding of cloud-native technologies and container security.
• Have experience with security frameworks and standards (e.g., OWASP, NIST).
• Have a certification in cybersecurity, such as the Certified Information Systems Security Professional (CISSP) or Certified Application Security Engineer (CASE).