CyberSecurity Pentesting

You will be responsible for conducting manual security assessments across web, mobile, APIs, networks, and thick-client applications to uncover exploitable weaknesses. This includes scoping engagements, researching emerging attack techniques, and analyzing complex application and infrastructure architectures to map realistic attack paths. You will provide clear, risk-based remediation guidance and produce concise, business-relevant reports. Key Responsibilities: - Assist in scoping security testing activities based on client requirements and architecture reviews - Execute manual penetration tests for web applications, mobile applications, web services/APIs, networks, and thick clients - Conduct focused security research when not on active engagements - Analyze complex application, infrastructure, and solution architectures to identify weaknesses and attack paths - Provide consultative guidance and clear, actionable remediation recommendations to stakeholders (verbal and written) - Prepare high-quality assessment reports with concise risk articulation and business-relevant recommendations - Enhance and maintain penetration testing methodologies, processes, playbooks, and standards - Maintain technical proficiency via ongoing learning, certifications, and structured training - Communicate team services, capabilities, and value to internal and external stakeholders - Leverage automation and scripting, including AI-assisted and AI-integrated approaches, to improve testing efficiency and coverage - Support vulnerability research and exploit development activities (including AI-enabled techniques where appropriate) - Perform security testing for LLM-enabled applications and AI systems, validating common LLM-related risks and misuse scenarios Qualifications Required: - Proven hands-on experience in manual Web Application Penetration Testing - Proven hands-on experience in manual Mobile Application Penetration Testing - Hands-on experience in API/Web Services Penetration Testing - Hands-on experience in Network Penetration Testing - Hands-on experience in Thick Client Penetration Testing - Strong understanding of common vulnerabilities, attack techniques, and remediation approaches across applications and infrastructure - Ability to analyze complex architectures to identify potential attack paths - Strong written and verbal communication skills to explain technical findings to diverse audiences - Ability to provide practical, risk-based, and actionable remediation recommendations - Experience with security testing tools, manual validation techniques, and scripting/automation to support testing activities You will be responsible for conducting manual security assessments across web, mobile, APIs, networks, and thick-client applications to uncover exploitable weaknesses. This includes scoping engagements, researching emerging attack techniques, and analyzing complex application and infrastructure architectures to map realistic attack paths. You will provide clear, risk-based remediation guidance and produce concise, business-relevant reports. Key Responsibilities: - Assist in scoping security testing activities based on client requirements and architecture reviews - Execute manual penetration tests for web applications, mobile applications, web services/APIs, networks, and thick clients - Conduct focused security research when not on active engagements - Analyze complex application, infrastructure, and solution architectures to identify weaknesses and attack paths - Provide consultative guidance and clear, actionable remediation recommendations to stakeholders (verbal and written) - Prepare high-quality assessment reports with concise risk articulation and business-relevant recommendations - Enhance and maintain penetration testing methodologies, processes, playbooks, and standards - Maintain technical proficiency via ongoing learning, certifications, and structured training - Communicate team services, capabilities, and value to internal and external stakeholders - Leverage automation and scripting, including AI-assisted and AI-integrated approaches, to improve testing efficiency and coverage - Support vulnerability research and exploit development activities (including AI-enabled techniques where appropriate) - Perform security testing for LLM-enabled applications and AI systems, validating common LLM-related risks and misuse scenarios Qualifications Required: - Proven hands-on experience in manual Web Application Penetration Testing - Proven hands-on experience in manual Mobile Application Penetration Testing - Hands-on experience in API/Web Services Penetration Testing - Hands-on experience in Network Penetration Testing - Hands-on experience in Thick Client Penetration Testing - Strong understanding of common vulnerabilities, attack techniques, and remediation approaches across applications and infrastructure - Ability to analyze complex architectures to identify potential attack paths - Stro