Security Engineer

Dahl Consulting is partnering with a leading Fortune 50 retail organization known for its large-scale digital presence and commitment to innovation to hire a Security Engineer specializing in penetration testing. This role focuses on identifying and mitigating security vulnerabilities across web applications, APIs, and enterprise systems, playing a key role in safeguarding customer data.

Responsibilities:

• Conduct end-to-end penetration tests, including scoping, exploitation, validation, and reporting
• Identify and assess vulnerabilities in web applications and APIs, including OWASP Top 10 risks
• Utilize advanced security testing tools such as Burp Suite, Nmap, and exploitation frameworks
• Develop scripts and automation in Python or Go to enhance testing efficiency
• Document security findings clearly, providing actionable remediation recommendations
• Partner with engineering teams to validate fixes and strengthen overall security posture
• Support risk identification efforts, including pre-deployment threat modeling activities
• Contribute to security initiatives such as bug bounty programs and vulnerability triage
• Assist in improving penetration testing processes, tools, and methodologies
• Provide mentorship or technical guidance to junior team members when applicable

Requirements:

• Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience
• 7+ years of experience in cybersecurity, with progressive responsibility in penetration testing
• 5+ years of hands-on penetration testing experience focused on web applications and APIs in enterprise environments
• Proven ability to execute full penetration testing lifecycle (scoping through reporting)
• Strong knowledge of web application security vulnerabilities, including OWASP Top 10, authentication/authorization flaws, and injection attacks
• Advanced proficiency with security testing tools such as Burp Suite, Nmap, and common exploitation frameworks
• Experience developing scripts or automation using Python or Go
• Strong documentation skills with the ability to communicate findings and remediation steps clearly
• Experience collaborating with engineering teams to remediate vulnerabilities
• Experience testing mobile applications, hardware/embedded systems, or third-party/vendor platforms
• Familiarity with PCI penetration testing requirements and compliance frameworks
• Experience supporting or contributing to bug bounty programs (triage, validation, escalation)
• Exposure to threat modeling and proactive risk identification
• Experience mentoring or guiding other security testers
• Advanced understanding of networking and system architecture in large-scale environments
• Experience improving or automating penetration testing processes and tooling
• Relevant certifications such as OSCP, OSCE, OSWE, or CISSP