We are seeking an experienced Senior Penetration Testing Consultant to join our offensive security team. In this role, you will lead and execute penetration testing engagements, assess complex environments, and provide actionable security recommendations to protect our clients against evolving threats. You will work closely with stakeholders to identify vulnerabilities, misconfigurations, exploit weaknesses, and recommend appropriate actions to mitigate the findings.
Key Responsibilities
- Conduct penetration tests on networks, applications, APIs, and cloud environments.
- Perform red team & purple team exercises, social engineering, detection capability assessments.
- Document detailed reports with findings, risk ratings, and remediation guidance.
- Stay current on emerging threats, tools, and techniques in offensive security.
- Mentor junior team members and contribute to methodology development.
Required Qualifications
- 5+ years of hands-on penetration testing experience, preferably in professional services.
- Strong knowledge of network protocols, web application security, and cloud platforms (AWS, Azure, GCP).
- Proficiency with tools such as Burp Suite, Cobalt Strike, and custom scripts.
- Ability to develop custom exploits and scripts in Python, PowerShell, or Bash.
- Knowledge of the MITRE ATT&CK framework and OWASP Top 10.
- Certifications such as OSCP, OSCE, OSEP, or equivalent highly preferred.
- Team player: you collaborate with your colleagues for peer review and to help them.
- Excellent report writing and client communication skills.
