Cyber - MAST Web & Network PT - Consultant

• *Description for Internal Candidates    
  Roles and Responsibilities: Web & Network -Consultant
• Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications
• Plan and execute network penetration testing and Red teaming assessments to simulate real-world attack scenarios.
• Perform manual network and application penetration tests on internal network, Active Directory environment, web applications.
• Perform social engineering assessment to assess the security awareness and physical security controls of the organization.
• Ability to independently research for new vulnerabilities in systems and software and modify and customize tools, known exploits, POCs and scripts to meet operational requirement.
• Research and stay up-to-date with the latest attack techniques, tools, and emerging threats.
•  One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSWE, OSWA

• *Description for Internal Candidates    
  Roles and Responsibilities: Web & Network -Consultant
• Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications
• Plan and execute network penetration testing and Red teaming assessments to simulate real-world attack scenarios.
• Perform manual network and application penetration tests on internal network, Active Directory environment, web applications.
• Perform social engineering assessment to assess the security awareness and physical security controls of the organization.
• Ability to independently research for new vulnerabilities in systems and software and modify and customize tools, known exploits, POCs and scripts to meet operational requirement.
• Research and stay up-to-date with the latest attack techniques, tools, and emerging threats.
•  One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSWE, OSWA
•  One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSWE, OSWA

Prior Experience:

The candidate must have 4 to 6 years of relevant experience in a similar role, preferably in a professional services organization.