Description

Execute end-to-end offensive security operations, from project kickoff to final remediation guidance.

Responsibilities

• Perform hands-on penetration testing across web applications, network environments, and cloud deployments.
• Conduct security design reviews and code reviews for web applications and APIs.
• Develop custom helper tools for security verification.
• Write clear vulnerability reports and provide actionable remediation guidance to development teams.
• Document findings and security knowledge into reusable guidelines, checklists, and examples.

Required Skills

• 8+ years of experience in offensive security and penetration testing.
• Deep knowledge of web technologies including HTML5, Java, JavaScript, and Tomcat.
• Expertise in application security mechanisms: authentication, authorization, data validation, output sanitization, and encryption.
• Proficiency with penetration testing tools: Burp Suite, Nessus, sqlmap, Nmap, and Wireshark.
• Strong understanding of web service technologies: WebSockets, SOAP, REST, JSON, XML, OAuth, and SAML.
• Working knowledge of scripting languages such as Python, Ruby, NodeJS, or PHP.
• Understanding of network protocols, protection techniques, and bypass methods.
• Knowledge of cryptographic principles including symmetric/asymmetric encryption and PKI.
• Experience with fuzzing, security code review, and RDBMS systems like MySQL, PostgreSQL, and Oracle.
• Proficiency with both Linux and Windows operating systems.

Preferred Skills

• Experience with AWS (including serverless), GCP, or MS Azure.
• Mobile application security expertise.

Key Skills

Education

Any Graduate