Note: The candidate must be flexible to work overtime, on-site/off-site, as needed, including weekends, holidays, and off-hours.



Responsibilities

• Conduct internal and external penetration testing of networks, web applications, APIs, and cloud environments to identify security vulnerabilities and exploit paths.


• Perform red team engagements simulating real-world adversary tactics, techniques, and procedures (TTPs) aligned with MITRE ATT&CK.


• Execute vulnerability assessments and validate remediation efforts through retesting and technical verification.


• Develop comprehensive penetration testing reports, including executive summaries, risk ratings, proof-of-concept evidence, and actionable remediation guidance.


• Perform threat modeling and attack surface analysis to identify high-risk exposure areas and privilege escalation pathways.


• Conduct secure configur...