Execution and analysis of vulnerability scans and determining remediation steps.
Execution and analysis of Penetration Tests (manual and autonomous), writing reports, and delivery of reports to client stakeholders.
Lead client meetings, offering expert advice and guidance as needed.
Collaborate with clients to understand their business needs and requirements to best align remediation requirements to business outcomes.
Creation and ongoing upkeep of materials documenting our security processes, procedures, and technologies, along with the generation of automated reports for relevant stakeholders.
Update client Security presentations and discuss findings with our clients.
Maintain a leading edge on security events and techniques to keep our clients aware of new threats and attack techniques.

3-5 years of experience executing penetration tests, writing reports and delivering report debriefs to clients.
Solid understanding of network protocols, operating systems, application layer protocols, and security best practices.
Understanding cybersecurity threats, and experience with incident response standards and procedures.
Ability to communicate security information to non-technical people.
A passion for Cyber Security.
Knowledge of risk assessment tools, technologies and methods.
Knowledge of penetration testing methodologies, frameworks, and tools.
Knowledge of common Windows and Linux/Unix system calls and APIs.
Working knowledge of pentesting tools, such as Burpsuite, Metasploit framework, Caido.
Knowledge of programming and/or scripting languages (i.e. Python).
One or more of the following certifications or other relevant certifications: eJPT, PJPT, PenTest+, OSCP, GPEN, PNPT, CEH, Security+.

Security Engineer, Offensive Security

Key skills