• Plan, execute, and report on penetration tests of web, API, mobile, and infrastructure systems independently • Perform source code analysis to identify and validate application vulnerabilities • Develop custom scripts or proof-of-concept exploits to demonstrate impact of vulnerabilities • Perform post-exploitation analysis and validate detections using tools such as CrowdStrike Falcon • Collaborate with development and operations teams to guide remediation and conduct retests • Contribute to internal methodologies and documentation to improve testing consistency • Mentor junior penetration testers and share best practices across the team • Participate in red team and adversary simulation exercises to assess overall defense capabilities