Description

Perform deep-dive security assessments across web, mobile, and network environments.

This role is remote.

Responsibilities

• Conduct full exploitation operations in Windows and *nix environments.
• Execute web, mobile, and network penetration testing alongside source code reviews.
• Develop and modify custom tooling to address evolving security requirements.
• Implement static and dynamic security testing within automated application security pipelines.
• Communicate technical findings and remediation strategies to engineers, executive leadership, and legal counsel.

Required Skills

• 7+ years of experience performing application penetration tests.
• Proficiency in reading, writing, and editing code in Perl, Python, Ruby, Bash, C/C++, C#, and Java.
• Hands-on experience with Burp Suite Pro and its relevant plugins.
• Experience with Nessus, Acunetix, Metasploit, or Cobalt Strike.
• Expertise in reverse engineering mobile applications, including those with anti-emulator and obfuscation protections.
• Strong background in cloud, network, and system security.
• Bachelor’s Degree or equivalent work experience in IT, Computer Engineering, or a similar field.

Preferred Skills

• Industry certifications such as OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, or GXPN.
• Contributions to the security community including research, CVEs, bug bounties, or open-source projects.

Key Skills

Education

Any Graduate