Provides application security expertise across the SDLC and DevOps through security assessments, secure architecture reviews, WAF configuration and monitoring, tooling optimization, technical evaluations, developer coaching, and governance. The role focuses on Akamai and Cloudflare WAF platforms, cloud-hosted applications, vulnerability analysis, security telemetry, dashboards, metrics, and repeatable application security processes.
Job Title: Application Security Consultant (5896-1)
Location: 2 Broadway - MTA Headquarters
Note: This is an on-site position.
Job Description:
- The application security consultant role is an on-premises position.
- The consultant will provide specialized security expertise to support product teams, product owners, infrastructure, and cybersecurity leadership.
- This role strengthens application security across the SDLC and DevOps through assessments, secure architecture reviews, tooling optimization, and operational governance.
- The consultant will also play a key role in onboarding, configuring, tuning, and monitoring protections across Akamai and Cloudflare WAF platforms, ensuring consistent security coverage across high‑value, cloud‑hosted, and externally facing applications.
- Additionally, the consultant is expected to perform technical assessments, enabling development teams through tooling and coaching, and helping establish repeatable processes, metrics, and governance.
Technical Skills
1. 5+ years Hands‑on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush).
2. 4+ Hands‑on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing).
3. Deep understanding of OWASP Top 10, application security principles, secure development practices.
4. 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
5. Experience analyzing HTTP traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.).
6. Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
7. Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.
About Us:
Since 2000, Tri-Force Consulting Services (https://triforce-inc.com) has been an MBE/SDB certified IT Consulting
firm in the Philadelphia region. Tri-Force specializes in IT staffing, software development (web and mobile apps),
systems integration, data analytics, system automation, cybersecurity, and cloud technology solutions for government
and commercial clients. Tri-Force works with clients to overcome obstacles such as increasing productivity,
increasing efficiencies through automation, and lowering costs. Our clients benefit from our three distinguishing
core values: integrity, diligence, and technological excellence.
Tri-Force is a six-time winner among the fastest-growing companies in Philadelphia and a four-time winner on the
Inc. 5000 list of the nation's fastest-growing companies.
Similar Jobs
Fintech • Financial Services
Supports branch operations by processing and approving teller transactions, resolving customer and employee concerns, minimizing operational risk, and promoting digital banking solutions. Assists the branch manager with scheduling and daily tasks, identifies customer financial needs, escalates issues, and helps motivate team members to meet business objectives while following banking policies and compliance procedures.
Fintech • Financial Services
Analyzes companies and markets, develops client strategies, builds financial models, conducts industry research, and prepares client presentations for private capital markets transactions. The role collaborates with internal and external stakeholders, manages risk and compliance requirements, and requires FINRA licensing within the specified timeframe.
Fintech • Financial Services
Build customer relationships, understand financial needs, recommend banking products and services, support account openings and credit applications, process cash transactions, conduct outreach, use digital banking tools, and maintain compliance with risk and operational standards. The role collaborates with branch teammates and requires Saturday availability.
Top Skills:
Digital Banking ToolsDigital Customer Service Platforms
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
