Offensive Security Advisor-Matriz-Edificio Anexo-Seguridad De La Informacion-Bg

Tasks

• Assess Active Directory security
• Assess cloud security
• Assess corporate networks
• Assess internal and external infrastructure
• Conduct penetration testing
• Configure automated security gates in CI CD pipelines
• Define OKRs for offensive coverage
• Design pentesting methodology
• Evaluate web mobile applications
• Execute adversary emulation exercises
• Lead offensive security program
• Lead secure development lifecycle
• Manage pentesting budget and vendors
• Operate bug bounty and responsible disclosure
• Perform offensive code review
• Perform threat modeling
• Present findings to CISO and risk committee
• Quantify risk impact metrics
• Run DAST
• Run IaC security scanning
• Run SAST
• Run purple team operations
• Run red team operations
• Run secret scanning
• Triage and validate vulnerability reports
• Validate security controls and remediation improvements

Perks/Benefits

• N/A

Skills/Tech-stack

Active Directory | Active Directory Security | Adversary Emulation | Application Security | Atomic Red Team | BloodHound | Bug Bounty | Burp Suite | Burp Suite Professional | CI/CD | CVE validation | Caldera | Cloud Security | Cobalt Strike | Container Security | DAST | Directory Security | IaC | Impacket | Lateral movement | Linux Security | MITRE ATT&CK | Metasploit | Mobile Application Security | Mobile application | NIST | Nessus | Nmap | OSCP style reporting | OWASP | Penetration Testing | Privilege escalation | Purple Team | Red team | Responsible disclosure | SAST | SCA | Secret Scanning | Threat modeling | Web Application | Web application security | Windows Security