Senior Security Consultant

Advanced knowledge of common penetration testing tools (Burp Suite, Metasploit, Wireshark, etc.).

Proficient in reverse engineering tools (IDA Pro, Ghidra, Binary Ninja, etc.).

Deep understanding of cloud-native security issues and technologies (containers, Kubernetes, serverless, etc.).

Strong knowledge of application security principles, including OWASP Top 10, secure coding practices, and common vulnerabilities.

Understanding of product security practices and secure software development life cycles.

Your everyday work will look like: Lead application security assessments including web, mobile, and thick client applications.

Perform Secure Code Reviews (manual and automated) across multiple programming languages and frameworks.

Conduct vulnerability assessments, penetration testing, and configuration reviews for applications, networks, and cloud environments.

Identify, validate, and document vulnerabilities with detailed remediation guidance.

Develop and enhance internal testing methodologies, scripts, and frameworks for security assessments.

Collaborate with red team, application security, and dev teams during remediation and retests. Review and design security architectures, ensuring alignment with standards (OWASP, NIST, ISO 27001, CIS, etc.).

Support clients with remediation planning, security awareness, and incident response guidance.

Contribute to pre-sales and proposal development by scoping technical requirements and security service offerings.

Mentor and guide junior consultants in performing security assessments and documentation.

Minimum 5+ years of hands-on experience in penetration testing, security research, or related fields.