Description

You will conduct advanced security assessments and red teaming engagements focused on applications and APIs. You own the manual testing process to evaluate and document risks.

Responsibilities

• Perform red teaming against applications and APIs using manual, non-automated testing methodologies.
• Execute application threat hunting to evaluate and document risks.
• Generate technical reports on assessment findings to facilitate remediation.
• Act as a subject matter expert for security engineering questions regarding application defense enhancements.
• Collaborate with Security Architects, Product Managers, and Risk Managers to ensure product security.

Required Skills

• 6+ years of experience in application security testing.
• 4+ years of experience conducting red teaming engagements.
• 4+ years of experience using Burp Suite Professional and OWASP Zap.
• Proficiency in manual testing and "live off the land" strategies.
• Deep understanding of OWASP Top 10 and SANS Top 25 vulnerabilities and defensive techniques.
• Knowledge of the MITRE Framework and adversarial methodologies.
• Ability to bypass controls and test countermeasures for misconfigurations.
• OSCP, GWAPT, or equivalent offensive security/red teaming certification.

Preferred Skills

• Experience collaborating with Security Architects and Product Managers in a large-scale environment.

Key Skills

Education

Any Gradute