• Proficiency in executing comprehensive web application penetration testing is required. • Understand and safely use various open-source penetration testing tools and when appropriate, emulating hacker tactics, techniques, procedures (TTPs). • Develop comprehensive and accurate reports and presentations for various consumers of penetration testing results. • Experience with security testing and configuration review of major cloud platforms (e.g., AWS, Azure) preferred. • Familiarity with cloud computing concepts and security models, including IaaS, PaaS, and serverless architectures. • Understanding and practical application of the MITRE ATT&CK framework for analyzing adversary TTPs. • Estimated workload is 3-4 assessments per quarter, consisting of 1-2-week assessments including report writing, maintaining a 70% billable utilization.