Senior Penetration Tester

Required Skills:

• Excellent Spoken and Written English.
• Knowledge of Agile Development processes
• Knowledge of OWASP Testing Methodology
• Familiar with application security attacks and countermeasures.
• Familiar with both automated and manual assessment techniques.
• Comfortable explaining technical vulnerabilities and risks to both technical and non-technical audiences.
• In-depth experience identifying and protecting against web application vulnerabilities.
• Experience with various application and infrastructure security tools and products (Burp Suite, Nmap, Nessus, and OWASP ZAP).
• Strong knowledge of browser security model, mobile app security, cryptography, and network security.
• Experience with security tools for static analysis, dynamic analysis, penetration testing, intrusion detection.
• Basic programing ability, ideally with PHP, Python, or Node.js.

Educational Qualifications (Desirable):

• GIAC Penetration Tester (GPEN)
• CompTIA PenTest+
• Offensive Security Certified Professional (OSCP)
• Burp Suite Certified Practitioner

Roles and Responsibilities:

• Perform penetration testing on web applications, mobile applications, APIs, operating systems, and network infrastructure.
• Generate and deliver professional penetration testing reports and presentations.
• Implement automation for finding vulnerabilities in CI/CD process.
• Improving data security through use of encryption/key management, segregation, or other techniques.
• Helping engineers design more secure systems via design input and code review.
• Develop secure coding guidelines.
• Deliver web application security training to developers.
• Be a security subject matter expert and respond to any internal security engineering questions/request.
• Perform reactive incident response when a security event occurs.
• Perform proactive research to detect new attack vectors
• Perform periodic testing of defensive controls through red/purple teaming engagements
• Serve as a subject matter expert in all things related to vulnerability management.