Senior Offensive Security Consultant

Job summary

The successful candidate will conduct web and API penetration testing for large enterprise organizations while analyzing business logic behind findings. They are responsible for documenting results and effectively communicating technical findings and business impact to clients.

Job details

One of Millenilink’s clients in the management consulting space is experiencing rapid growth of their project pipeline and looking to add some Offensive Security professionals to their team. The successful candidate(s) will be hired on a contract basis. Our client would ideally prefer to hire part-time 10-20 hours per week (flexible), however we also do have one (1) full-time contract available for 3 months. The successful candidate(s) will be working with large enterprise organizations in financial services and other sectors conducting web and API penetration testing. Mobile testing is a nice to have but will make up a small component of the testing required. Candidates also need to understand the business logic behind the test results and be able to conduct manual testing where required as well as be able to draft reports based on findings for the end client. Given this automated testing without understanding or being able to explain the results will not work. This opportunity can be located anywhere in Canada. In order to qualify for this opportunity candidates MUST have: 3 to 5 years experience with web and API penetrating testing experience Offensive Security subject matter expertise Strong preference for those with consulting or professional services experience in a client-facing environment Experience dissecting and understanding the business logic behind penetration test results and generating reports for client utilization and remediation Experience testing -> validate -> document findings -> walking the client through the report Manual penetrating testing experience including cart/pricing manipulation, discount abuse, workflow bypass, authorization flaws and more Communication and critical thinking regarding Offensive Security Experience defending severity and translating technical findings into business impact Ability to work 10 to 20 hours per week as primary or secondary contract Nice to Have Mobile application testing experience Experience testing for financial services organizations

What you’ll do

The successful candidate will conduct web and API penetration testing for large enterprise organizations while analyzing business logic behind findings. They are responsible for documenting results and effectively communicating technical findings and business impact to clients.

Requirements

Candidates must have 3 to 5 years of experience in web and API penetration testing with strong manual testing and reporting skills. Professional services or consulting experience is highly preferred to ensure effective client interaction.

Listed skills

• Critical Thinking · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Web penetration testing
• API penetration testing
• Manual testing
• Business logic analysis
• Report writing
• Offensive security
• Client-facing communication
• Critical thinking
• Vulnerability assessment
• Authorization flaws
• Workflow bypass
• Discount abuse
• Pricing manipulation
• Mobile application testing

Job areas

• Security & Safety
• Consulting
• Technology
• Software

More jobs from Millenilink