Position: Security Engineer / Penetration Tester
Work Location: Remote (USA)
Duration: 2 Years+
Need only independent contractors
Requirement Overview:
- Bachelor's Degree required. Must be legally authorized to work in the United States without the need for employment sponsorship, now or at any time in the future.
- 3+ years of hands-on experience in penetration testing, with a focus on web applications and APIs. Experience participating in red team engagements or adversary simulation exercises.
- Strong understanding of the OWASP Top 10, web application security, and common attack vectors. Proficiency with industry-standard tools such as Burp Suite, Nmap, Metasploit, and custom scripts.
- Demonstrated ability to identify and exploit vulnerabilities such as XSS, SQLi, CSRF, SSRF, authentication/authorization flaws, and business logic issues.
- Excellent written and verbal communication skills, including the ability to present findings to technical and non-technical audiences.
Preferred Certifications:
- OSCP (Offensive Security Certified Professional)
- OSWE (Offensive Security Web Expert), and CRTO (Certified Red Team Operator) required.
Preferred:
- Certifications such as OSWEP, CRTO, or eJPT (eLearnSecurity Junior Penetration Tester) are highly desirable.
- Experience with cloud-based application testing, mobile application security, or social engineering. Scripting or programming experience (Python, PowerShell, Bash, etc.).
- Experience with purple team exercises or collaboration with blue teams.