Senior Penetration Tester

· Extensive experience leading authorized penetration testing, ethical hacking, red team assessments, and technical security testing across enterprise networks, applications, cloud environments, and infrastructure. · Advanced hands-on experience with penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, and similar security assessment platforms. · Expertise in web application and API penetration testing, OWASP Top 10 vulnerabilities, authentication weaknesses, privilege escalation, and security misconfiguration analysis. · Experience conducting internal and external network penetration testing, Active Directory security assessments, cloud penetration testing, and controlled exploitation of identified vulnerabilities. · Strong understanding of NIST SP 800-115, NIST SP 800-53A, MITRE ATT&CK, OWASP testing methodologies, and CISA High Value Asset assessment practices. · Ability to develop penetration testing methodologies, rules of engagement, assessment schedules, test plans, and technical testing procedures. · Experience preparing detailed penetration testing reports, risk-rated findings, proof-of-concept evidence, remediation recommendations, and executive-level assessment summaries. · Proven ability to lead penetration testing teams, coordinate with System Owners and security assessors, validate remediation actions, and support federal security authorization activities.