Application Offensive Security Consultant

• Conduct offensive security testing on web applications and APIs to identify potential vulnerabilities and attack vectors.
• Perform application threat hunting to proactively assess and mitigate risks.
• Execute manual penetration testing of applications to uncover security flaws beyond automated scanning capabilities.
• Document vulnerabilities using standardized report formats, combining insights from manual testing methodologies and industry-standard tools.
• Generate detailed assessment reports, highlighting technical issues and providing clear remediation guidance.
• Act as a subject matter expert in application security, addressing queries and offering solutions related to Application dep improvements.
• Collaborate closely with Security Architects, Product Managers, Risk Managers, and cross-functional teams to deliver secure, high-quality products.

Technical Skills & Qualifications:

• Strong experience in testing web applications for security vulnerabilities.
• Hands-on expertise with application penetration testing tools such as Burp Suite and OWASP ZAP.
• Demonstrated ability to think creatively and manually identify weaknesses aligned with the OWASP Top 10, without reliance on automated scanners.
• Solid understanding of the MITRE ATT&CK Framework and adversarial threat methodologies.
• Bachelor s degree in a related field or equivalent practical experience.