{"id":2934157,"url":"https://alion.io/job/pellera-technologies-principal-application-security-consultant","title":"Principal Application Security Consultant","company":{"id":1903672,"name":"Pellera Technologies","domain":"pellera.com","url":"https://alion.io/company/pellera","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"B","score":80,"open_postings":5,"ghost_share":0,"stale_share":0.8,"repost_share":0,"time_to_fill_p50_days":24,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":115000,"max_usd":223000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":98},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Red Teaming","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-20T04:00:00Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-22T20:34:51Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Position Title: Principal Application Security Consultant, Professional Services\n\nPosition Location: Remote in the Contiguous US\n\nJob Summary:\nThe Principal Consultant delivers on a variety of red team projects and techniques with a focus on business outcomes and helping our clients reduce risk through technical testing. Professional services tasks will include working with diverse Fortune 1000 clients to fully test their environments.\n\nEssential Functions:\nBusiness focused technical testing – apply advanced technical methods to test, prove and\nvalidate technical controls within client applications.\nConduct technical assessments of client web applications, API’s, mobile applications, and AI enabled applications.\nPerform threat analysis, including identifying critical organization assets and services, relevant\nthreat actors, and likely threat events.\nPerform pre-assessment research and preparation including reconnaissance, documentation\nand customer interviews.\nDocument security weaknesses, including steps to reproduce.\nAnalyze security findings, including risk analysis and root cause analysis.\nResearch and propose practical remediation.\n\nRequired Skills/Abilities/Competencies:\nEthical and Critical Thinking.\nApply industry standards and best practices including the OWASP Application Security Verification Standard (ASVS), various OWASP Top 10’s, Open-Source Security Testing\nMethodology Manual (OSSTMM), and the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework.\nInvolvement in security-related projects / communities including CTFs.\nAnalytic sharpness in thinking like a threat actor or attacker.\nBe authentic, trustworthy, straightforward, and honest.\nHave a client-first mindset and the ability to interact professionally with customers.\nPossess a blue-collar work ethic with the willingness to wear many proverbial ‘hats’ and have a flexible outlook towards your work.\nBe competitive and have a performance-based drive to succeed, including self-sufficiency and the ability to work as part of a team.\n\nPreferred Additional Skills/Abilities/Competencies\nAbility to conduct network-layer penetration tests of external and internal client networks.\nKnowledge of common Active Directory attacks, adversary-in-the-middle attacks, and relay based attacks common in Windows-based networks.\nExperience with password-spraying and password cracking\nObfuscation/Encoding designed to bypass or defeat various controls or countermeasures.\nExperience bypassing common security technologies such as advanced EDR solutions.\nConducting social engineering exercises with adherence to a defined Rules of Engagement document.\nExperience conducting wireless penetration tests against modern wireless networks.\n\nEducation and Experience:\nBachelor’s degree in Computer Science, Computer Information Systems, or equivalent preferred.\nOSWE certification or equivalent advanced level certs are required.\nOther Offensive Security certifications are a plus.\nNetwork testing skills are a plus.\nExcellent report writing and consultative skills.\nExperienced penetration tester and vulnerability assessor\n\nPhysical Requirements:\nProlonged periods of sitting at a desk and working on a computer.\nMust be able to lift up to 15 pounds at times.\n\nWe are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.\n\nEmployees hired under this position must be able to perform the essential functions of the position satisfactorily and, if requested, reasonable accommodation will be made to enable employees with disabilities to perform the essential functions, absent undue hardship. The Employer retains the right to change or assign other duties to this position at any time with or without notice.","description_format":"text","description_chars":3879,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-20T15:38:48Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":24,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/pellera-technologies-principal-application-security-consultant","json_url":"https://alion.io/job/pellera-technologies-principal-application-security-consultant.json","meta":{"generated_at":"2026-10-22T21:43:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6435,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1903672},"rest":"https://alion.io/mcp/rest/get_company?id=1903672"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpellera-technologies-principal-application-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpellera-technologies-principal-application-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpellera-technologies-principal-application-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pellera-technologies-principal-application-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpellera-technologies-principal-application-security-consultant"}]}