Application Security Specialist

MAKE STRATEGY A REALITY | ACCELERATE YOUR GROWTH | CHOOSE YOUR PATH

As the world's leading change and transformation consultancy, we're helping businesses move from strategy to reality by taking a pragmatic and practical approach to build solutions that last.

We're seeking a Application Security Specialist in Denver to help us take vision to value and create lasting impact.

SUMMARY

The Application Security Specialist will lead and execute initiatives to ensure that all existing applications within the organization's environment are secure, compliant, and resilient to cyber threats. Reporting to executive IT Security Manager, the Specialist will work closely with development, IT, and operations teams to embed security practices throughout the software development lifecycle, protect sensitive customer data, and reduce organizational risk.

YOU WILL:

The Application Security Specialist work will focus on two primary areas: Security Operations and Strategic Security Planning.

Security Operations - Protecting Applications

• Conduct regular application security assessments, including code reviews, penetration testing, and vulnerability scans.
  
• Collaborate with development and operations teams to remediate security vulnerabilities and implement best practices.
  
• Monitor security incidents and application-level threats, escalating issues as needed to leadership.
  
• Ensure compliance with relevant standards, policies, and regulatory requirements (e.g., NIST, PCI-DSS) and with PII standards and controls by implementing controls, monitoring adherence, documenting evidence of compliance, and supporting external compliance audits.
  
• Develop and maintain reporting dashboards that provide visibility into application security posture.
  

Strategic Security Planning - Strengthening the Security Program

• Define application security policies, standards, and guidelines for development teams.
  
• Provide guidance and training to developers and engineers on secure coding practices and threat mitigation.
  
• Partner with IT and business stakeholders to integrate security into new projects and applications.
  
• Recommend security tools, process improvements, and risk mitigation strategies to enhance the organization's security posture.
  
• Plan and prioritize long-term security initiatives aligned with organizational goals, including emerging threat defenses and secure architecture improvements.
  

Through these responsibilities, the Application Security Specialist ensures that the organization's applications remain secure, resilient, and compliant, protecting revenue, customer data, and operational integrity.

IDEALLY, WE'D LIKE:

• 
  

  5+ years of experience in application security or related information security roles.

  
  
• 
  

  Strong knowledge of secure coding practices and common security vulnerabilities (e.g., OWASP Top 10).

  
  
• 
  

  Experience with application security testing tools and methodologies.

  
  
• 
  

  Familiarity with web application technologies and architectures.

  
  
• 
  

  Understanding of network security principles and protocols.

  
  
• 
  

  Knowledge of relevant security standards and regulations.

  
  
• 
  

  Strong analytical and problem-solving skills. Excellent communication skills, both written and verbal.

  
  
• 
  

  Ability to work effectively in a team environment and collaborate with various stakeholders.

  
  
• 
  

  Bachelor's degree in Computer Science, Information Security, or a related field

  
  
• 
  

  Master's degree in Information Security or a related field.

  
  
• 
  

  Relevant security certifications such as CISSP, CEH, OSCP, or CSSLP.

  
  
• 
  

  Experience in the transportation or tolling industry.

  
  
• 
  

  Knowledge of cloud security principles and practices.

  
  
• 
  

  Familiarity with DevSecOps practices and tools.

  
  
• 
  

  Experience with secure API design and implementation.

  
  
• 
  

  Understanding of mobile application security.

  
  
• 
  

  This role offers an exciting opportunity to shape the security posture of our organization and protect our critical applications and data.

  
  
• 
  

  The ideal candidate will be passionate about application security, proactive in identifying and mitigating risks, and able to balance security requirements with business needs.

  
  

We strive to offer competitive compensation and benefits while maintaining flexibility for both the employee and the North Highland. Total Rewards associated with this position include an hourly rate from: $70.00 - $100.00 as well as a basic benefits package for temporary employees and paid time off (PTO).

Applicants must be authorized to work in the United States, without the need for visa sponsorship by North Highland. Work visa sponsorship will not be provided, either now or in the future, for this position. This is a temporary employee (W2) opportunity.

North Highland is an equal opportunity employer, and we adhere to all applicable laws and regulations to ensure a fair and equitable workplace. All qualified applicants will receive fair and impartial consideration without regard to race, color, sex, gender identity, religion, national origin, age, sexual orientation, disability, veteran status, or any other characteristic protected by law. We handle all information in accordance local privacy standards and maintain strict confidentiality.

#ind2