Description

You will perform offensive security assessments on applications and provide subject matter expertise to support technology risk initiatives.

Responsibilities

• Perform red teaming against applications and APIs.
• Conduct manual, non-automated security testing and application threat hunting.
• Generate technical reports on assessment findings and summarize issues to facilitate remediation.
• Act as a subject matter expert for security engineering questions regarding application defense enhancements.
• Collaborate with Security Architects, Product Managers, and Risk Managers to deliver secure products.

Required Skills

• 6+ years of experience in application security testing.
• 4+ years of experience conducting red teaming engagements.
• 4+ years of experience using tools such as Burp Suite Professional and OWASP Zap.
• Ability to perform manual testing and "live off the land" strategies.
• Deep understanding of OWASP Top 10 and SANS Top 25 vulnerabilities and defensive techniques.
• Knowledge of MITRE Framework and adversarial methodologies.
• Ability to bypass controls and test countermeasures for misconfigurations.
• OSCP, GWAPT, or equivalent offensive security/red teaming certification.
• Bachelor's Degree or equivalent experience.

Key Skills

Education

Bachelor's Degree