IT Application Security Consultant

New Wave People is hiring an IT Application Security Consultant for an onsite role in Manhattan, NY. This is an on-premises consulting position focused on helping product teams strengthen application security across the SDLC and DevOps, with an emphasis on WAF-driven protections for high-value, cloud-hosted, externally facing applications.

You will provide security expertise spanning assessments, secure architecture reviews, and operational governance, while also supporting onboarding, configuration, tuning, and monitoring across Akamai and Cloudflare WAF platforms.

Core responsibilities

• Deliver specialized security guidance to product teams, product owners, infrastructure, and cybersecurity leadership.
• Improve application security throughout the SDLC and DevOps using assessments, secure architecture reviews, tooling optimization, and operational governance.
• Onboard, configure, tune, and monitor protections across Akamai and Cloudflare WAF, supporting consistent security coverage for high-value and externally exposed applications.
• Conduct technical assessments that enable development teams through tooling support and coaching, and help establish repeatable processes, metrics, and governance.
• Perform other reasonably related duties as required.

Required experience and skills

• Cloudflare WAF: 5+ years hands-on experience with policies, rulesets, firewall rules, bot management, DNS, DDoS, and logpush.
• Akamai WAF: 4+ years hands-on experience with KSD/Property Manager, Bot Manager, Edge DNS, and log staging/testing.
• Deep understanding of OWASP Top 10, application security principles, and secure development practices.
• 5+ years experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
• Experience analyzing HTTP traffic, including headers and payloads, and mapping attack vectors such as XSS, SQLi, RCE, deserialization, CSRF, SSRF, and similar threats.
• Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
• Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.

Relevant technologies

• Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush)
• Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing)
• OWASP Top 10
• SAST, DAST, SCA (including Checkmarx, BurpSuite, Fortify)
• HTTP, SIEM, SOAR
• Akama iWAF log staging/testing, Akamai WAF KSD/Property Manager, Cloudflare WAF rulesets, Cloudflare WAF firewall rules, Cloudflare WAF policies

Onsite schedule and notes

• Onsite requirement: M-F, 37.5 hours weekly
• 0.30 minute unpaid lunch break
• No holiday work, no overtime, no travel required
• No parking provided

Location: Manhattan, NY (onsite). Salary: USD 51 to 52 per hour. Minimum experience: 4 years.