Provide technical guidance and conduct security assessments on applications.
Possess a thorough understanding of application security testing, adversarial engagements, penetration testing, and related development skills to ensure the use of security best practices in project initiatives.
Conduct red team exercises against applications and APIs.
Engage in application threat hunting to assess risks.
Perform manual security testing of applications without automation.
Deliver vulnerability information in a predefined report format, utilizing both manual methods and tools.
Generate and summarize assessment reports to facilitate remediation, documenting technical issues identified during security evaluations.
Explain vulnerabilities and weaknesses as outlined in the OWASP Top 10 and SANS Top 25.
Understand the MITRE Framework and adversarial methodologies.
Bypass controls and test countermeasures for misconfigurations.
Work effectively under pressure, manage multiple tasks, and maintain flexibility.
Hold certifications such as OSCP, GWAPT, or equivalent offensive security/red teaming certifications
- Standorte
- Jersey City, New Jersey, United States
- Zeitzonen
- Weltweit