Security Testing Engineer

Responsible for proactively identifying exploiting and documenting security vulnerabilities across the organizations enterprise applications infrastructure and physical security controls.
The role focuses on identifying technical weaknesses through active testing logical analysis and proactive detection.
Penetration Testing: Performing hands-on comprehensive tests across infrastructure networks and applications.
Utilizing industry-standard tools such as Burp Suite Postman and Kali Linux to identify and exploit vulnerabilities.
Red Team Injection Logic: Planning and executing technical injections and simulated attack steps within larger red team exercises.
Executing threat hunts designed by the Threat Intelligence team to proactively search for adversary activity.
The team follows strict internal standards that are subject to continuous improvement. Most penetration tests are project-based test-and-report engagements which may be performed in-house or via a vendor depending on project classification.
Punctual red team activities are an increasing requirement for validating defensive controls.
Threat Intelligence
While the teams work closely the offensive team focuses on the technical application of intelligence. The Offensive Security team has access to TTPs and internal threat intelligence tooling.
Threat hunting is a collaborative effort with the Threat Intelligence team; Required Technical Proficiency
Candidates must possess a deep technical background to support complex testing and tabletop design.
The candidate is responsible for the full lifecycle of security assessments and documentation. Scoping plans based on demo meetings/technical docs executing tests per the scope document and delivering findings to all organizational levels including Executive Summaries.
Investigating technical documentation and playbooks to design attack patterns and injections; Threat Hunt: Performing threat hunts supported by or in conjunction with the Threat Intelligence team/tooling.
Producing high-quality technical documentation for all tests and performing peer reviews of reports from other penetration testers.