Description:
Key Responsibilities
- Perform penetration testing across web, mobile, APIs, networks, cloud, and Active Directory environments.
- Identify, exploit, and document vulnerabilities, misconfigurations, and insecure coding practices.
- Proactively design and implement new security processes, tools, and best practices to improve organizational security maturity.
- Prepare detailed technical reports and executive-level summaries with clear remediation steps.
- Ensure all offensive security activities comply with HIPAA Security Rules and ISO 27001 ISMS standards.
- Support security audits, risk assessments, and compliance reporting by providing accurate technical evidence.
- Conduct security awareness training sessions, including phishing simulations and policy reinforcement.
- Collaborate with Development, DevOps, and Compliance teams to integrate security into SDLC and deployment pipelines.
Required Skills & Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, or a related discipline.
- Minimum 3+ years of experience in offensive security, penetration testing, or red teaming.
- Ability to work independently with strong ownership of security initiatives.
- Proficiency with tools such as Burp Suite, Metasploit, Nmap, BloodHound, Wireshark, and custom scripting.
- Strong understanding of HIPAA Security & Privacy Rules and ISO 27001 controls.
- Hands-on experience with scripting/programming (Python, Bash, or PowerShell).
- Strong analytical and problem-solving skills with the ability to deliver high-quality reports.
- Excellent communication and presentation skills to engage technical and non-technical audiences.