Responsibilities
- Lead and conduct offensive security operations across diverse systems including web applications, APIs, cloud platforms, and networks.
- Direct hands-on penetration testing efforts across multiple service lines within offensive security.
- Supervise and actively participate in penetration tests, red team exercises, and in-depth security evaluations.
- Serve as the primary technical resource for resolving complex vulnerabilities, unusual scenarios, and client-specific inquiries.
- Remain deeply involved in testing activities to verify results, question assumptions, and uphold rigorous assessment standards.
- Lead a team of penetration testers and security engineers, offering technical mentorship, performance feedback, and growth opportunities.
- Guide team members by reviewing testing approaches, vulnerability findings, reports, and client interactions.
- Promote a work environment rooted in continuous learning, inquisitiveness, responsibility, and professional excellence.
- Maintain high standards for the quality and consistency of delivered assessments.
- Take ownership of engagement scoping, execution integrity, and report quality.
- Ensure all identified vulnerabilities are precise, repeatable, risk-prioritized, and useful for development and compliance teams.
- Evaluate and enhance reporting outputs to meet strict benchmarks for technical accuracy, readability, and client suitability.
- Ensure uniform delivery quality across all engagements, independent of tester, client scale, or service type.
- Collaborate with Sales on technical discovery, scope definition, and proposal development.
- Educate potential clients on real-world threats, depth of testing, and strategic value beyond compliance checklists.
- Apply field experience to shape realistic, effective, and well-structured engagement scoping discussions.
- Monitor and optimize key performance indicators such as SLA compliance, retest speed, utilization rates, client satisfaction, and report quality.
- Detect inefficiencies and drive improvements in delivery workflows and tooling.
- Balance managerial duties with active involvement in billable technical work.
- Contribute practical insights to the development of service offerings like Red Teaming, AI/LLM security testing, Secure Code Review, and IoT assessments.
- Support the launch of new services by establishing scope definitions, methodologies, delivery benchmarks, and quality criteria.
- Leverage firsthand engagement experience to refine how services are structured, executed, and communicated to clients.
