• Perform internal, external, web application, and network penetration tests using industry-standard methodologies • Validate vulnerability scanner findings through manual testing and exploitation techniques • Conduct attack simulations and adversary emulation aligned to real-world threat scenarios • Lead vulnerability management lifecycle activities including prioritization, remediation validation, and risk acceptance • Identify false positives and confirm true security weaknesses through hands-on analysis • Develop and maintain penetration testing methodologies, playbooks, and reporting standards • Produce detailed penetration testing and vulnerability reports with risk ratings and remediation guidance • Collaborate with SOC, infrastructure, cloud, and application teams to remediate identified risks • Support red team and purple team exercises and threat modeling activities • Assist with security architecture reviews and secure design recommendations • Mentor Level 1 and Level 2 security engineers • Support compliance-driven testing requirements (SOC 2, ISO 27001, PCI DSS, NIST, CMMC)