Description

Perform offensive security assessments on applications and provide subject matter expertise for technology risk projects.

Responsibilities

• Conduct red teaming against applications and APIs.
• Perform manual, non-automated security testing and application threat hunting to evaluate risk.
• Generate technical reports on assessment findings to facilitate remediation.
• Act as a subject matter expert for Application Defense enhancement requests.
• Collaborate with Security Architects, Product Managers, and Risk Managers to deliver secure products.

Required Skills

• 6+ years of experience in application security testing.
• 4+ years of experience conducting red teaming engagements.
• 4+ years of experience using tools such as Burp Suite Professional and OWASP Zap.
• Proficiency in manual testing and "live off the land" strategies.
• Deep understanding of OWASP Top 10 and SANS Top 25 vulnerabilities and defensive techniques.
• Working knowledge of the MITRE Framework and adversarial methodologies.
• Ability to bypass controls and test countermeasures for misconfigurations.
• OSCP, GWAPT, or related offensive security/red teaming certification.
• Bachelor's Degree or equivalent experience.

Key Skills

Education

Bachelor's Degree