Offensive Security - Penetration Tester
Core
Perform security assessments, manual penetration testing, and develop remediation recommendations for web applications, network devices, and cloud systems.
Role type
Senior IC penetration tester (application security)
Builds
Security assessments and remediation guidance for middle-market clients
Domain
Cybersecurity / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
manual penetration testing, static application security testing (SAST), dynamic application security testing (DAST), web security vulnerability exploitation, cloud security best practices, security standards development, remediation recommendation formulation, technical writing, Python scripting, Ruby scripting, Perl scripting, Docker, CDK, Terraform, Java, React, GraphQL, Javascript, JSON, REST, AWS
Preferred skills
Offensive Security Web Assessor (OSWA), Offensive Security Web Expert (OSWE), Offensive Security Certified Professional (OSCP), Burp Suite Certified Practitioner, AWS Certified Security Specialist
Technologies
Burp Suite, AWS, Docker, CDK, Terraform, Java, Python, React, GraphQL, Javascript, JSON, REST
Responsibilities
Perform security assessments including static and dynamic application security testing; Conduct manual penetration testing on web applications, network devices, and other systems; Collaborate with clients across various technology stacks and cloud platforms; Develop, enhance, and interpret security standards and guidance; Demonstrate and promote security best practices including secure development and cloud security; Assist with the development of remediation recommendations for identified findings; Identify and clearly articulate findings to senior management and clients; Help identify improvement opportunities for assigned clients; Supervise and provide engagement management for other staff working on assigned engagements
Seniority
Mid-level, hands-on IC