Job Summary
As a Senior Consultant on the Offensive Security team, you will be a key consultant in assessing and challenging the security posture of a diverse client portfolio. You will leverage a variety of advanced tools and methodologies to act as the client's advocate for cybersecurity best practices. This role is critical in providing strong, actionable recommendations to enhance our clients' defenses against sophisticated threats.
Key Responsibilities
- Conduct comprehensive penetration tests (network, web application, cloud, mobile) to identify and exploit vulnerabilities.
- Deliver assessments using Palo Alto Networks Frontier AI Defense test harnesses and platforms using the latest frontier models.
- Develop custom scripts, tools, and methodologies to automate and enhance offensive security engagements and internal processes.
- Proactively engage with clients, clearly articulating testing approaches and methodologies to both technical and executive audiences.
- Generate detailed reports that communicate test results, identified risks, and concrete remediation recommendations to clients.
- Proactively collaborate with internal teams and clients, exchanging information to ensure alignment and accomplish shared security objectives.
- Assist in scoping new opportunities and developing internal infrastructure for offensive security research and development.
- Ability to travel as needed to meet business demands
Qualifications
Required Qualifications
- Bachelor s Degree in Information Security, Computer Science, or a related field, or equivalent professional experience.
- 3+ years of professional experience in information security, with a focus on penetration testing and vulnerability assessments.
- Expertise with security assessment tools such as Metasploit, Burp Suite Pro, Cobalt Strike, Nessus, and Bloodhound.
- Proficiency in scripting or programming with languages like Python, PowerShell, Ruby, or C++.
- Demonstrated experience in conducting penetration tests across various environments including Windows, Linux, and cloud platforms (AWS, GCP, Azure).
Preferred Qualifications
- Demonstrated interest in LLM driven offensive security
- Certifications such as OSCP, OSCE, GPEN, GWAPT, or GXPN.
- Experience with public speaking, publishing research, or contributing to the security community.
