The key ingredients to being a good AppSec consultant are: a strong interest in this kind of work; the right technical and business background; strong aptitude; and, for many, a willingness to travel at a high tempo. The field is particularly attractive to those who like puzzles and figuring out how things work that no one else really understands. Good consultants understand their clients’ business processes, including people and people and use that understanding to build relationships that can help the client make good decisions.”]
Source: https://www.bankinfosecurity.com/blogs/how-to-be-appsec-consultant-p-1348