FAQ

• Q: What will my day to day be like as an Application Security Consultant?

  A: You grab your coffee and commute to your home office (or coffee shop, wherever) in about 30 seconds. There, in the comfort of home, you pick up where you left your running tests to move them forward. If you finish up an assessment, then you pivot to your next target or work with your manager to determine other pressing needs that require attention. You keep in touch with the team using Slack, Skype, Google Hangouts, and even a good ol’ IP phone. Using your company provided MacBook you may help write up some content for a proposal to make sure it fits the goals and objectives communicated by a customer. When you are done for the day you commute back home in about 30 seconds. Unless, of course, you encounter gridlock in the hallway.

• Q: What skills and qualities are you looking for in a candidate?

  Here’s some lists:

  • Consulting soft skills:
    • Attention to detail
    • Ability to lead projects, calls and meetings
    • Desire to solve problems
    • Ability to communicate effectively and clearly
    • Ability to listen to customers and adapt accordingly (rigidity seldom means success) General technology:
    • Google apps (Drive, Docs, Spreadsheets)
    • MS Office (we have a love/hate relationship with Word and Excel)
    • Customer service focus
    • MacOSX - as a user

• Application Security skill

  Candidates should be familiar with application security attacks and countermeasures, familiar with both automated and manual assessment techniques, and comfortable explaining technical vulnerabilities and risks to both technical and non-technical audiences. Some development experience is helpful, but not required.

  Relevant certifications (definitely not required):

  • CEH,
  • OSCP,
  • GIAC (GPEN)

  Relevant experience:

  • Experience with various application and infrastructure security tools and products (Burp, Suite, Fortify,
  • IBM AppScan, WebInspect, Nmap, Nessus)
  • The ideal candidate will be comfortable working remote and managing themselves. You will be an integral part of the team with a huge impact on Stratum. We're passionate about what we do and you should be too.