Application Offensive Security Consultant

Join our Application Security team as part of our Technology Risk initiative to support offensive security assessments and provide expert guidance on key projects. As an Application Offensive Security Consultant, you will be responsible for penetration testing, security assessments, and vulnerability identification across applications and APIs., * Conduct offensive security testing on applications and APIs.

• Perform manual penetration testing to identify vulnerabilities beyond automated scans.
• Evaluate application threats and assess security risks.
• Provide detailed vulnerability reports with remediation recommendations.
• Collaborate with Security Architects, Product Managers, and Risk Managers to implement security best practices.
• Stay updated on emerging attack methodologies and security trends.

• 6+ years of experience in web application security testing.

• 4+ years of hands-on experience with penetration testing tools, such as: *

• Burp Suite
• OWASP ZAP

• Strong understanding of: *

• OWASP Top 10 vulnerabilities
• MITRE ATT&CK Framework
• Ability to manually discover vulnerabilities beyond automated scanning.
• Bachelors degree in a relevant field or equivalent experience.

Preferred Qualifications (Nice to Have)

• Certifications in offensive security/penetration testing, such as: *

• OSCP (Offensive Security Certified Professional)
• CEH (Certified Ethical Hacker)
• Experience in Red Teaming and Adversarial Testing.
• Active participation in Capture the Flag (CTF) competitions or platforms like TryHackMe, HackTheBox.
• Ability to work under pressure, manage multiple tasks, and adapt to dynamic security challenges.

Skills: Application Programming Interface (API), Applications Security, Best Practices, CEH - Certified Ethical Hacker, Computer Security, Financial Trend Analysis, Internet Application, Internet Security, Multitasking, Penetration Testing, Risk, Risk Management, Security Analysis, Security Architecture, Security Attacks, Security Consulting, Software Testing, Testing, Threat and risk analysis (TRA), Vulnerability Scanners, Web Testing