Responsibilities include but are not limited to:

• Perform web application audits (common), network penetration tests (common), source code analysis (common), hardware assessments (less common), mobile penetration tests (common) across multiple industries and environments.
• Create detailed penetration test reports in the English language (detailing the steps that were taken to exploit the issues and provide actionable remediation suggestions).
• The ability to create/script tools and exploits during the engagement to demonstrate a vulnerability with proof or write meaningful test cases (to test all attack theories).
• Expect a hands-on approach to penetration testing. Very little automation is used (we take very deep dives into our targets to provide the best results).
• Work with other team members on client assessments. We are a team and work best as a group. It is very rare to have a solo engagement.
• Contribute to in-house written tools (Python) to aide in the penetration testing process.