Qualifications
Required Qualifications
Bachelor’s degree or equivalent education, training, and work-related experience.
Minimum of 7 years of experience in security engineering or related cybersecurity roles.
Deep specialized knowledge in cybersecurity principles, theories, and concepts.
Proven experience in software development lifecycle security practices.
Deep knowledge of threat modeling, security testing, and penetration testing.
Experience implementing and managing complex information security technologies.
Preferred Qualifications
5+ years of penetration testing, red teaming, offensive security, vulnerability research, or related cybersecurity experience.
Strong technical writing and communication skills.
Ability to clearly articulate technical risks to both technical and non-technical audiences.
Ability to independently manage multiple engagements in a dynamic environment.
Experience defending technical findings and participating in challenging stakeholder discussions.
Strong analytical and problem-solving skills.
Ability to adapt quickly to changing priorities, technologies, and business needs.
Experience with AI Security Testing and/or Mainframe Security Testing.
Experience performing assessments in one or more of the following are:
Experience conducting penetration testing, red team, and security assessments across a variety of environments and technologies, including Active Directory, APIs, web applications, infrastructure, cloud platforms, mobile applications, thick/client-server applications, IoT devices, wireless networks, network security, social engineering, and physical security controls.
Banking, financial services, or highly regulated industry experience.
Experience supporting red team, purple team, or adversary emulation activities.
Experience with scripting, automation, and offensive security tool development.
Desired Characteristics
Is a self-starter who requires minimal supervision.
Takes ownership and drives work to completion.
Performs well under demanding workloads and changing priorities.
Remains professional and effective during conflict and difficult conversations.
Is comfortable challenging assumptions and presenting evidence-based findings.
Continuously invests in improving technical and professional skills.
Demonstrates resilience, accountability, and a strong bias for action.
Balances individual execution with team success.
Helps elevate the performance of those around them.
Relevant Certifications
Candidates may hold one or more of the following industry-recognized certifications:
Offensive Security (OffSec): OSCP+, OSEP, OSED, OSEE, OSWE, OSWA, OSAI
GIAC: GPEN, GWAPT, GXPN, GRTP, GCFA
ISC2: CISSP, CRIS
Hack The Box: CPTS, Active Directory Penetration Tester, Web Exploitation Specialist, Web Exploitation Expert, Offensive AI Expert