Consultant

Role summary

Responsibilities

• Innovate within the Vulnerability and Penetration Testing program across process and technology.
• Serve as a subject matter expert for the Attack & Pen function.
• Conduct authorized attack-surface reviews, penetration tests, and red-team assessments.
• Write clear assessment reports with practical recommendations based on risk management.
• Update security standards and procedures and assess policies against security best practices.
• Contribute to security information repositories and business-development efforts.
• Mentor junior team members and consult with peer groups.

Background requirements

• Computer Science bachelor’s degree or substantial equivalent.
• 2 to 6 years of professional information security experience focused on technical assessments.
• Commanding knowledge of penetration-testing concepts and best practices.
• Extensive experience with common penetration-testing tools, with examples including Nessus, AppScan, Burp Suite, Nipper, and Exploit Pack.
• Proficiency with attack tools and frameworks such as Wireshark, Kali, and Metasploit.
• Ability to accurately validate identified vulnerabilities.
• Mastery of common application platforms and technologies and manual assessment techniques.
• In-depth understanding of OWASP, CVE, security controls, and current application and operating-system exploits.
• Knowledge of common scripting and programming languages such as Python or shell script.
• GIAC GPEN, GWAPT, CREST, or OSCE certifications are preferred.

Personal skills

• Strong written and oral English communication, including the ability to explain complex concepts to business audiences.
• Able to think critically and remain composed under pressure.
• Able to work productively and maintain focus with minimal supervision.
• Understands VAPT in the context of risk management and organizational priorities.