Cybersecurity Consultant

S27A • Jersey City, NJ

4d

About The Position

Provide technical guidance and conduct security assessments on applications. Possess a thorough understanding of application security testing, adversarial engagements, penetration testing, and related development skills to ensure the use of security best practices in project initiatives. Conduct red team exercises against applications and APIs. Engage in application threat hunting to assess risks. Perform manual security testing of applications without automation. Deliver vulnerability information in a predefined report format, utilizing both manual methods and tools. Generate and summarize assessment reports to facilitate remediation, documenting technical issues identified during security evaluations. Explain vulnerabilities and weaknesses as outlined in the OWASP Top 10 and SANS Top 25. Understand the MITRE Framework and adversarial methodologies. Bypass controls and test countermeasures for misconfigurations. Work effectively under pressure, manage multiple tasks, and maintain flexibility.

Requirements

• Thorough understanding of application security testing.
• Thorough understanding of adversarial engagements.
• Thorough understanding of penetration testing.
• Related development skills.
• Ability to ensure the use of security best practices in project initiatives.
• Understanding of the MITRE Framework.
• Understanding of adversarial methodologies.
• Ability to bypass controls and test countermeasures for misconfigurations.
• Ability to work effectively under pressure.
• Ability to manage multiple tasks.
• Ability to maintain flexibility.

Nice To Haves

• Certifications such as OSCP, GWAPT, or equivalent offensive security/red teaming certifications.

Responsibilities

• Provide technical guidance on applications.
• Conduct security assessments on applications.
• Conduct red team exercises against applications and APIs.
• Engage in application threat hunting to assess risks.
• Perform manual security testing of applications without automation.
• Deliver vulnerability information in a predefined report format.
• Generate and summarize assessment reports to facilitate remediation.
• Document technical issues identified during security evaluations.
• Explain vulnerabilities and weaknesses as outlined in the OWASP Top 10 and SANS Top 25.
• Understand the MITRE Framework and adversarial methodologies.
• Bypass controls and test countermeasures for misconfigurations.
• Work effectively under pressure.
• Manage multiple tasks.
• Maintain flexibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed