The Application Security Expert - Red Team / Ethical Hacker is a critical role responsible for proactively identifying and exploiting security vulnerabilities in our software applications throughout the entire Software Development Life Cycle (SDLC). Operating as a key member of the in-house Red Team, this role will focus on simulating real-world attacks, conducting advanced penetration testing, and providing actionable intelligence to strengthen our overall security posture.
- Red Teaming & Attack Simulation:
Plan and execute realistic attack simulations against our web, mobile, and desktop applications to identify weaknesses and bypass security controls.
Develop and utilize custom exploits, tools, and techniques to mimic the tactics, techniques, and procedures (TTPs) of advanced threat actors.
Conduct social engineering campaigns to assess employee awareness and identify potential vulnerabilities.
- Advanced Penetration Testing:
Perform in-depth penetration tests of applications, networks, and systems, using both automated tools and manual techniques.
Identify and exploit complex vulnerabilities, including those related to application logic, authentication, authorization, and data handling.
Develop detailed penetration test reports with clear and actionable recommendations for remediation.
- Secure Code Review (Offensive Perspective):
Conduct code reviews from an offensive perspective, identifying potential vulnerabilities that could be exploited by attackers.
Provide developers with guidance on secure coding practices and vulnerability remediation techniques.
Don't want to miss the next one?
Subscribe to daily email alerts for roles matching your interests.
