Execute manual penetration testing engagements against a variety of web applications/services and software
Develop other security engineers
Advise management of violations or egregious negligence toward defined standards in targets tested
Provide actionable remediation feedback for findings and/or long-term risk mitigation guidance
Provide clear communication on the issue to developers and verify the efficacy of the ‘fix’
Partner with developers to drive improvement in application security as a result of security assessment engagements
Requirements
A Bachelor's degree in Computer Science, Cybersecurity, or other related fields
5+ years of experience in penetration testing, code review, bug bounty hunting, or red teaming/capture the flag experience
Experience in scripting in Python or other languages to build automation tools
5+ years of professional experience with security engineering practices such as in web application security, network security, authN/authZ protocols, cryptography, automation, and other software security.
Must be a team player with strong communication skills.