Description

You will lead technical security assessments for client and internal projects. You own the delivery of attack and penetration testing engagements, including Red Team and Purple Team operations.

Responsibilities

• Execute penetration testing projects and conduct application code reviews.
• Perform threat modeling, security architecture reviews, and social engineering engagements.
• Deliver OSINT-based assessments and provide mitigation recommendations to stakeholders.
• Document findings and guide remediation for cloud-hosted applications and services.

Required Skills

• 3+ years of experience in IT Security conducting penetration testing.
• Deep understanding of networking architecture, protocols, and operating systems.
• Comprehensive knowledge of web application mechanics from backend to frontend.
• Familiarity with Red Team methodologies, including MITRE ATT&CK and social engineering.
• Experience testing cloud-hosted applications and services.
• Knowledge of application security verification standards and vulnerability mitigation.
• Proficiency in Python, C++, C#, or Java programming.
• OSCP, OSWE, GPEN, or similar professional certification.
• Fluency in English.

Preferred Skills

• Documented participation in Bug Bounty programs or responsible disclosures.
• Granted CVEs.

Key Skills

Education

Any Graduate