Job Description Our client is seeking an experienced Security Specialist 3 with extensive expertise in web application assessment, penetration testing, cybersecurity compliance, and secure coding practices. The ideal candidate must have a strong background in security standards, government compliance frameworks, and application security training. The candidate will be responsible for conducting web application security assessments and penetration testing, identifying vulnerabilities, evaluating security controls, supporting regulatory compliance, and developing training programs focused on secure coding and web application security best practices. Mandatory Qualifications Candidates must meet the following requirements:

Certifications:

Must possess all three valid certifications, each held for a minimum of five (5) years: Certified Information Systems Security Professional (CISSP). PCI Qualified Security Assessor (QSA). GIAC Web Application Penetration Tester (GWAPT). Copies of all three valid certifications must be provided.

NIST/FIPS

Experience:

Minimum of five (5) years of experience working with the National Institute of Standards and Technology (NIST) and Federal Information Processing Standards (FIPS).

California Government Standards:

Minimum of five (5) years of experience working with the California State Administrative Manual (SAM) and California Statewide Information Management Manual (SIMM).

Web Application Penetration Testing:

Minimum of ten (10) years of experience developing and executing web application assessments and penetration testing.

Security Compliance Experience:

Minimum of five (5) years of experience working with at least one or a combination of the following: Payment Card Industry Data Security Standards (PCI DSS). IRS Publication 1075. State or local government financial data protection.

ISO/IEC 27000

series.

Security Training:

Minimum of three (3) years of experience developing both instructor-led, in-person training and self-paced training on secure coding standards and web application security best practices.

Education:

Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, Information Systems, Computer Engineering, or a closely related technical field from an accredited college or university. A copy of the degree must be provided. Desirable Qualifications Valid GIAC Cloud Penetration Tester (GCPN) certification or GIAC Mobile Device Security (GMOB) certification. Experience supporting government or public-sector cybersecurity initiatives. Key Responsibilities Conduct web application security assessments and penetration testing. Identify application vulnerabilities, assess security risks, and recommend remediation measures. Apply NIST, FIPS, California SAM, and SIMM requirements. Evaluate compliance with applicable security standards and government data protection requirements. Develop and deliver in-person and self-paced secure coding training. Support application security improvements and security compliance initiatives. Document assessment findings, vulnerabilities, and remediation recommendations.

Pay:

$50.00 - $85.00 per hour

Work Location:

In person