Perform hands-on, full-scope web application penetration tests against real customer applications.
Review NodeZero results on live customer engagements to identify coverage gaps.
Manually reproduce and validate edge cases and build reliable proof-of-concept exploits.
Partner closely with software engineers to translate findings into product improvements.
Monitor production pentests for missed findings and drive issues to resolution.
Collaborate with customers and internal teams to investigate findings and address questions.

Extensive hands-on experience conducting full-scope web application penetration tests.
Deep, practical knowledge of common and not-so-common web vulnerability classes.
Strong command of proxy tools like Burp Suite and browser developer tools.
Comfort scripting to reproduce findings and build proof-of-concept exploits.
Strong written and verbal communication, including technical documentation.
Ability to manage multiple priorities and mentor teammates of varying experience levels.

WebApp Offensive Security Engineer

Key skills