Principal Technical Consultant – Cloud and Application Security

AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.

AtAHEAD, we prioritize creating a culture of belonging,where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.

We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.

We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives atAHEAD.

Principal Technical Consultants are seasoned experts in information security, cloud security, application security and Dev Sec Ops , threat management, and related technologies, with the ability to secure applications and APIs across the cloud-native software delivery lifecycle. Successful candidates support the Security team in Delivery, Business Development, and Practice Development.

The following are the expectations of a Principal Technical Consultant:

• Leadsessions of strategy, roadmap, design, and planning workshops for small to medium sized service engagements
• Execute on project/program objectives, requirements gathering, project tasks/milestone, project status, dependencies, and timelines, to ensure engagements are delivered successfully and on time while meeting the business objectives
• Creation and finalization of project deliverables, may perform peer review for collateral developed by others on a delivery team
• Effective presentation of deliverables to project team members.
• Knowledge of AHEAD’s project lifecycle management activities to effectively support delivery engagements throughout the duration of a project
• Define and operationalize application security delivery plans, including secure SDLC controls, risk-based finding prioritization, developer enablement, metrics, and executive reporting.
• Lead application security and threat modeling workshops covering secure architecture, abuse cases, application and API risks, and remediation planning.

• Proficiency in technical troubleshooting; the ability to critically think about a problem and generate a creative solution with minimal oversight.
• Deep knowledge of scripting, particularly with Power Shell and/or Python, and the ability to troubleshoot developed code.
• Ability to triage andvalidateapplication security findings (SAST, DAST, SCA, secrets), distinguish exploitable issues from false positives, and recommend practical remediations.
• Ability to effectively communicate aspects of a technical solution to a non-technical individual.
• Capability to conduct research andutilizeavailable resources to fill in technical knowledge gaps where ambiguity presents itself.

• Support business development pursuits through client discovery meetings
• Represent service offerings during the sales cycle, including project scoping, proposal development, and presenting proposals to clients
• Knowledge of AHEAD’s sales managementlifecycle to effectively support sales opportunities throughout the duration of a proposal
• Lead client discovery and/or visioning workshops toidentifyopportunities for cross-practice collaboration
• Familiarity with AHEAD’s enterprise service portfolio toidentifyopportunities for cross-practice collaboration

• Maintainsubject matterexpertisein a minimum ofeightsecurity…