Senior Penetration Tester

Required Skills: Excellent Spoken and Written English. Knowledge of Agile Development processes Knowledge of OWASP Testing Methodology Familiar with application security attacks and countermeasures. Familiar with both automated and manual assessment techniques. Comfortable explaining technical vulnerabilities and risks to both technical and non-technical audiences. In-depth experience identifying and protecting against web application vulnerabilities. Experience with various application and infrastructure security tools and products (Burp Suite, Nmap, Nessus, and OWASP ZAP). Strong knowledge of browser security model, mobile app security, cryptography, and network security. Experience with security tools for static analysis, dynamic analysis, penetration testing, intrusion detection. Basic programing ability, ideally with PHP, Python, or Node.js. Educational Qualifications (Desirable): GIAC Penetration Tester (GPEN) CompTIA PenTest+ Offensive Security Certified Professional (OSCP) Burp Suite Certified Practitioner Roles and Responsibilities: Perform penetration testing on web applications, mobile applications, APIs, operating systems, and network infrastructure. Generate and deliver professional penetration testing reports and presentations. Implement automation for finding vulnerabilities in CI/CD process. Improving data security through use of encryption/key management, segregation, or other techniques. Helping engineers design more secure systems via design input and code review. Develop secure coding guidelines. Deliver web application security training to developers. Be a security subject matter expert and respond to any internal security engineering questions/request. Perform reactive incident response when a security event occurs. Perform proactive research to detect new attack vectors Perform periodic testing of defensive controls through red/purple teaming engagements Serve as a subject matter expert in all things related to vulnerability management.