The Role
Provides application security expertise across the SDLC and DevOps through security assessments, secure architecture reviews, WAF configuration and monitoring, tooling optimization, technical evaluations, developer coaching, and governance. The role focuses on Akamai and Cloudflare WAF platforms, cloud-hosted applications, vulnerability analysis, security telemetry, dashboards, metrics, and repeatable application security processes.
Summary Generated by Built In
Job Title: Application Security Consultant (5896-1)
Location: 2 Broadway - MTA Headquarters
Note: This is an on-site position.
Job Description:
- The application security consultant role is an on-premises position.
- The consultant will provide specialized security expertise to support product teams, product owners, infrastructure, and cybersecurity leadership.
- This role strengthens application security across the SDLC and DevOps through assessments, secure architecture reviews, tooling optimization, and operational governance.
- The consultant will also play a key role in onboarding, configuring, tuning, and monitoring protections across Akamai and Cloudflare WAF platforms, ensuring consistent security coverage across high‑value, cloud‑hosted, and externally facing applications.
- Additionally, the consultant is expected to perform technical assessments, enabling development teams through tooling and coaching, and helping establish repeatable processes, metrics, and governance.
Technical Skills
1. 5+ years Hands‑on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush).
2. 4+ Hands‑on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing).
3. Deep understanding of OWASP Top 10, application security principles, secure development practices.
4. 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
5. Experience analyzing HTTP traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.).
6. Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
7. Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.
About Us:
Since 2000, Tri-Force Consulting Services (https://triforce-inc.com) has been an MBE/SDB certified IT Consulting
firm in the Philadelphia region. Tri-Force specializes in IT staffing, software development (web and mobile apps),
systems integration, data analytics, system automation, cybersecurity, and cloud technology solutions for government
and commercial clients. Tri-Force works with clients to overcome obstacles such as increasing productivity,
increasing efficiencies through automation, and lowering costs. Our clients benefit from our three distinguishing
core values: integrity, diligence, and technological excellence.
Tri-Force is a six-time winner among the fastest-growing companies in Philadelphia and a four-time winner on the
Inc. 5000 list of the nation's fastest-growing companies.
Skills Required
- 5+ years of hands-on experience with Cloudflare WAF, including policies, rulesets, firewall rules, bot management, DNS, DDoS, and Logpush.
- 4+ years of hands-on experience with Akamai WAF, including KSD/Property Manager, Bot Manager, Edge DNS, and log staging/testing.
- Deep understanding of the OWASP Top 10, application security principles, and secure development practices.
- 5+ years of experience with SAST, DAST, and SCA tools such as Checkmarx, Burp Suite, Fortify, or equivalents.
- Experience analyzing HTTP traffic, headers, payloads, and attack vectors including XSS, SQL injection, RCE, deserialization, CSRF, and SSRF.
- Experience with cloud platforms including Azure, AWS, or SaaS and modern application architectures.
- Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR platforms, and cloud logs to build dashboards and metrics.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Tri-Force Consulting Services, Inc. is a U.S.-based IT consulting and staffing agency that provides comprehensive IT solutions, including AI-powered services, custom software development, cybersecurity, cloud technology, and IT staffing to government and commercial sectors.
