Application Security Penetration Testing Consultant

Must-haves -Bachelor's degree in Computer Science, Information Security, or a related field. -Minimum of 5 years of experience in manual and automated penetration testing. -Minimum of 5 years of experience in web application security or cybersecurity consulting. -Strong understanding of security protocols, cryptography, authentication, authorization, and security vulnerabilities. -Proficiency in penetration testing tools and techniques for web and mobile applications. -Experience with red teaming methodologies and offensive security practices. -Excellent problem-solving skills and ability to think like both an attacker and a defender.

Plusses -Offensive Security Certified Professional (OSCP) -Certified Information Systems Security Professional (CISSP) -Certified Ethical Hacker (CEH) -GIAC Web Application Penetration Tester (GWAPT) -GIAC Certified Incident Handler (GCIH)

Day-to-Day A financial services company is seeking an experienced Web Application Security Consultant to lead the research and implementation of cutting-edge red teaming software to enhance our automated penetration testing capabilities. As a Web Application Security Consultant, you will be at the forefront of our cybersecurity efforts, spearheading the research, selection, and deployment of a red teaming tool. Your expertise will be crucial in simulating sophisticated cyber-attacks, identifying vulnerabilities, and fortifying our defenses against potential threats. Key Responsibilities: -Lead the research and evaluation of red teaming tools and software for automated penetration testing. -Design and execute simulated attacks on web and mobile applications to assess security posture. -Collaborate with cross-functional teams to understand business requirements and integrate security solutions. -Develop and maintain security policies, procedures, and documentation related to red teaming activities. -Provide training and guidance to security and development teams on best practices and emerging threats. -Continuously monitor and analyze security systems for anomalies and improvements. -Prepare reports and presentations for senior management on security findings and recommendations.