Description

Perform offensive security assessments on applications and provide subject matter expertise to support technology risk initiatives.

This role is on-site.

Responsibilities

• Perform red teaming against applications and APIs using manual, non-automated security testing and application threat hunting.
• Generate technical reports on assessment findings and summarize issues to facilitate remediation.
• Act as a subject matter expert for security engineering questions regarding application defense enhancements.
• Collaborate with Security Architects, Product Managers, and Risk Managers to deliver secure products.

Required Skills

• 6+ years of experience in application security testing.
• 4+ years of experience conducting red teaming engagements.
• 4+ years of experience using tools such as Burp Suite Professional and OWASP Zap.
• Ability to perform manual testing and "live off the land" strategies.
• Deep understanding of OWASP Top 10 and SANS Top 25 vulnerabilities and defensive techniques.
• Knowledge of MITRE Framework and adversarial methodologies.
• Ability to bypass controls and test countermeasures for misconfigurations.
• OSCP, GWAPT, or equivalent offensive security/red teaming certification.

Preferred Skills

• Bachelor's Degree or equivalent experience.

Key Skills

Education

Bachelor's Degree