The Company

ISA Consulting is an IT company offering end-to-end solutions in Digital Transformation, Digital Consulting and Business Process Services - supporting all Tech Stacks. Collectively we service a multitude of clients across industries and company verticals. We are a culmination of some of the brightest Full Stack Developers, Data Engineers, Architects, Project Managers, Quality Analysts, Strategists, spanning across multiple time zones.

 

Job Summary

We are looking for an Application Security Engineer to help secure our eDiscovery and AI platform across the full software development lifecycle. The role is focused on manual secure code review and application security testing, and on partnering with engineering teams to find and fix vulnerabilities before they reach production. The work is hands-on and technically varied. You will review code across multiple products, languages, and frameworks, own reviews end to end, and help build the tooling and automation that support them. A successful candidate is a strong technical communicator who can work independently, write clear and evidence-backed findings, and drive them to closure with engineering.

 

Responsibilities & Duties

Code Review & Assessment

• Perform in-depth manual, tool-assisted, and AI-assisted code reviews to identify vulnerabilities before release.
• Own assigned reviews end to end, from scoping and repository identification through written findings and remediation follow-up.
• Independently resolve or escalate blockers; drive engagement with engineering teams without requiring day-to-day direction.
• Produce complete, evidence-backed review reports with severity ratings, reproduction detail, and remediation guidance, tracked to closure in Jira against defined SLAs.
• Partner with engineering teams to triage and remediate findings from code review, SAST/DAST, and other assessment tooling.

 

Security Engineering & SDLC

• Contribute to security reviews for new products, features, and services.
• Provide input on secure design, architecture, and implementation decisions.
• Apply secure development lifecycle practices, including threat modeling and security testing.
• Own dependency and supply chain risk (SCA, SBOM, vulnerability triage) and help extend security controls into CI/CD pipelines.
• Partner with Security Operations and Infrastructure teams to build security tooling and automation.

 

Influence & Enablement

• Create clear security guidance and documentation for engineering teams.
• Contribute to security training and the Security Champions program.

The Company

ISA Consulting is an IT company offering end-to-end solutions in Digital Transformation, Digital Consulting and Business Process Services - supporting all Tech Stacks. Collectively we service a multitude of clients across industries and company verticals. We are a culmination of some of the brightest Full Stack Developers, Data Engineers, Architects, Project Managers, Quality Analysts, Strategists, spanning across multiple time zones.

 

Job Summary

We are looking for an Application Security Engineer to help secure our eDiscovery and AI platform across the full software development lifecycle. The role is focused on manual secure code review and application security testing, and on partnering with engineering teams to find and fix vulnerabilities before they reach production. The work is hands-on and technically varied. You will review code across multiple products, languages, and frameworks, own reviews end to end, and help build the tooling and automation that support them. A successful candidate is a strong technical communicator who can work independently, write clear and evidence-backed findings, and drive them to closure with engineering.

 

Responsibilities & Duties

Code Review & Assessment

• Perform in-depth manual, tool-assisted, and AI-assisted code reviews to identify vulnerabilities before release.
• Own assigned reviews end to end, from scoping and repository identification through written findings and remediation follow-up.
• Independently resolve or escalate blockers; drive engagement with engineering teams without requiring day-to-day direction.
• Produce complete, evidence-backed review reports with severity ratings, reproduction detail, and remediation guidance, tracked to closure in Jira against defined SLAs.
• Partner with engineering teams to triage and remediate findings from code review, SAST/DAST, and other assessment tooling.

 

Security Engineering & SDLC

• Contribute to security reviews for new products, features, and services.
• Provide input on secure design, architecture, and implementation decisions.
• Apply secure development lifecycle practices, including threat modeling and security testing.
• Own dependency and supply chain risk (SCA, SBOM, vulnerability triage) and help extend security controls into CI/CD pipelines.
• Partner with Security Operations and Infrastructure teams to build security tooling and automation.

 

Influence & Enablement

• Create clear security guidance and documentation for engineering teams.
• Contribute to security training and the Security Champions program.