8 Oswa Jobs

Web and Network PT Consultant Roles & responsibilities Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications Plan and execute network penetration testing and Red teaming assessments to simulate real-world attack scenarios. Perform manual network and application penetration tests on internal network, Active Directory environment, web applications. Perform social engineering assessment to assess the security awareness and physical security controls of the organization. Ability to independently research for new vulnerabilities in systems and software and modify and customize tools, known exploits, POCs and scripts to meet operational requirement. Research and stay up-to-date with the latest attack techniques, tools, and emerging threats. Present technical reports to clients, explaining the outcomes of the testing and providing detailed insights and recommendations. Collaborate effectively with cross-functional teams, including developers, IT operations, and business stakeholders to integrate security best practices seamlessly into project workflows. Provide mentorship and guidance to junior security staff and foster a culture of proactive security awareness within the organization. This role is for you if you have the below We are seeking an experienced and highly skilled Consultant with over 5+ years of working experience in the field of cybersecurity, including network penetration testing, vulnerability assessment, Active directory testing, phishing assessment and web application penetration testing. The ideal candidate will possess a strong working knowledge of Network protocols, performing OSINT to identify publicly available information and testing and exploiting Microsoft services like Windows Servers, Active directory, Certificate Services. Mandatory technical & functional skills Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs,internal and external networks, and mobile applications 5+ years of professional experience in cybersecurity, with a focus on Network penetration testing and Red teaming. Strong understanding of Network protocols, web applications, cryptography various operating systems and security technologies. Strong understanding of exploitation of Microsoft platform used in enterprise environment such as windows Servers, Active Directory Certificate Service, Azure, etc. • Experience in one or more of the following a plus: Web application penetration testing, mobile application penetration testing application architecture and business logic analysis. Relevant certifications, such as GWAPT, OSCP, OSEP, CRTP, CRTO OSWA, are strongly preferred.

Consultant - MAST Vanguard Requirements: Mandatory Technical & Functional Skills Strong knowledge on manual secure code review against common programming languages (Java, C#) Minimum three (3) years of recent experience working with application tools to perform security tests: AppScan, NetsSparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, Kali Linux, or equivalent. Minimum three (3) years of performing manual penetration testing and code review against web apps, mobile apps, and APIs Minimum three (3) years of working with technical and non-technical audiences in reporting results and lead remediation conversations. Preferred one year of experience in development of web applications and/or APIs. Should be able to identify and work with new tools / technologies to plug and play on client projects as needed to solve the problem at hand. One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSCP, OSWE, OSWA Job Description: Roles & responsibilities Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications Perform manual security code review against common programming languages (Java, CSharp). Perform automated testing of running applications and static code (SAST, DAST). Experience in one or more of the following a plus: AI pen testing. Need to work on application tools to perform security tests: AppScan, NetsSparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, Kali Linux. Able to explain IDOR, Second Order SQL Injection, CSRF Vulnerability, Root cause, Remediation

We are seeking a highly skilled and experienced Cybersecurity Consultant with over 5 years of proven expertise in penetration testing, red teaming, vulnerability assessment , and Active Directory exploitation . In this role, you will simulate real-world attack scenarios, uncover critical vulnerabilities, and provide technical remediation guidance to strengthen security postures. You will also mentor junior team members and work cross-functionally to embed security best practices throughout the organization. Key Responsibilities Perform manual penetration testing on a variety of targets including: Web applications Internal business applications APIs Internal and external networks Mobile applications Plan and execute network penetration testing and Red Team assessments to simulate sophisticated threat actor behavior. Conduct Active Directory and Windows infrastructure testing , including attacks on Certificate Services , Kerberos , and NTLM . Execute social engineering assessments , including phishing campaigns and physical security evaluations. Conduct OSINT investigations to identify public exposure of sensitive assets or credentials. Customize and develop tools, scripts, and proof-of-concept exploits to meet specific operational goals. Continuously research emerging threats, vulnerabilities, attack vectors, and security technologies. Present detailed technical reports to stakeholders with risk ratings, impact summaries, and actionable remediation steps. Work closely with development, IT, and business teams to integrate security into project lifecycles and DevOps pipelines. Mentor junior team members , contribute to knowledge sharing, and promote security awareness throughout the organization. Required Skills and Qualifications Minimum 5 years of professional experience in cybersecurity with a focus on: Network and web application penetration testing Red teaming engagements Vulnerability assessments and exploit development In-depth understanding of: Network protocols and system architectures Microsoft enterprise infrastructure (Windows Servers, Active Directory, AD CS, Azure) Web and mobile application security , authentication mechanisms, and encryption Experience with manual exploitation techniques , as well as using and customizing tools like: Burp Suite, Nmap, Metasploit, BloodHound, Cobalt Strike, etc. Knowledge of social engineering attack vectors and security awareness testing Ability to perform business logic assessments and identify flaws beyond automated scanning Strong communication skills, including the ability to translate technical findings into executive-level reports Preferred Certifications One or more of the following certifications are highly desirable: OSCP Offensive Security Certified Professional OSEP Offensive Security Experienced Penetration Tester CRTP / CRTO Certified Red Team Professional / Operator OSWA / GWAPT Web Application Security Certs Professional Attributes Excellent analytical and problem-solving skills High degree of attention to detail Strong written and verbal communication skills Self-motivated with a proactive approach to learning and threat research Comfortable working both independently and in collaborative team settings

We are seeking a highly skilled and experienced Cybersecurity Consultant with over 5 years of proven expertise in penetration testing, red teaming, vulnerability assessment , and Active Directory exploitation . In this role, you will simulate real-world attack scenarios, uncover critical vulnerabilities, and provide technical remediation guidance to strengthen security postures. You will also mentor junior team members and work cross-functionally to embed security best practices throughout the organization. Key Responsibilities Perform manual penetration testing on a variety of targets including: Web applications Internal business applications APIs Internal and external networks Mobile applications Plan and execute network penetration testing and Red Team assessments to simulate sophisticated threat actor behavior. Conduct Active Directory and Windows infrastructure testing , including attacks on Certificate Services , Kerberos , and NTLM . Execute social engineering assessments , including phishing campaigns and physical security evaluations. Conduct OSINT investigations to identify public exposure of sensitive assets or credentials. Customize and develop tools, scripts, and proof-of-concept exploits to meet specific operational goals. Continuously research emerging threats, vulnerabilities, attack vectors, and security technologies. Present detailed technical reports to stakeholders with risk ratings, impact summaries, and actionable remediation steps. Work closely with development, IT, and business teams to integrate security into project lifecycles and DevOps pipelines. Mentor junior team members , contribute to knowledge sharing, and promote security awareness throughout the organization. Required Skills and Qualifications Minimum 5 years of professional experience in cybersecurity with a focus on: Network and web application penetration testing Red teaming engagements Vulnerability assessments and exploit development In-depth understanding of: Network protocols and system architectures Microsoft enterprise infrastructure (Windows Servers, Active Directory, AD CS, Azure) Web and mobile application security , authentication mechanisms, and encryption Experience with manual exploitation techniques , as well as using and customizing tools like: Burp Suite, Nmap, Metasploit, BloodHound, Cobalt Strike, etc. Knowledge of social engineering attack vectors and security awareness testing Ability to perform business logic assessments and identify flaws beyond automated scanning Strong communication skills, including the ability to translate technical findings into executive-level reports Preferred Certifications One or more of the following certifications are highly desirable: OSCP Offensive Security Certified Professional OSEP Offensive Security Experienced Penetration Tester CRTP / CRTO Certified Red Team Professional / Operator OSWA / GWAPT Web Application Security Certs Professional Attributes Excellent analytical and problem-solving skills High degree of attention to detail Strong written and verbal communication skills Self-motivated with a proactive approach to learning and threat research Comfortable working both independently and in collaborative team settings

We are seeking a highly skilled and experienced Cybersecurity Consultant with over 5 years of proven expertise in penetration testing, red teaming, vulnerability assessment , and Active Directory exploitation . In this role, you will simulate real-world attack scenarios, uncover critical vulnerabilities, and provide technical remediation guidance to strengthen security postures. You will also mentor junior team members and work cross-functionally to embed security best practices throughout the organization. Key Responsibilities Perform manual penetration testing on a variety of targets including: Web applications Internal business applications APIs Internal and external networks Mobile applications Plan and execute network penetration testing and Red Team assessments to simulate sophisticated threat actor behavior. Conduct Active Directory and Windows infrastructure testing , including attacks on Certificate Services , Kerberos , and NTLM . Execute social engineering assessments , including phishing campaigns and physical security evaluations. Conduct OSINT investigations to identify public exposure of sensitive assets or credentials. Customize and develop tools, scripts, and proof-of-concept exploits to meet specific operational goals. Continuously research emerging threats, vulnerabilities, attack vectors, and security technologies. Present detailed technical reports to stakeholders with risk ratings, impact summaries, and actionable remediation steps. Work closely with development, IT, and business teams to integrate security into project lifecycles and DevOps pipelines. Mentor junior team members , contribute to knowledge sharing, and promote security awareness throughout the organization. Required Skills and Qualifications Minimum 5 years of professional experience in cybersecurity with a focus on: Network and web application penetration testing Red teaming engagements Vulnerability assessments and exploit development In-depth understanding of: Network protocols and system architectures Microsoft enterprise infrastructure (Windows Servers, Active Directory, AD CS, Azure) Web and mobile application security , authentication mechanisms, and encryption Experience with manual exploitation techniques , as well as using and customizing tools like: Burp Suite, Nmap, Metasploit, BloodHound, Cobalt Strike, etc. Knowledge of social engineering attack vectors and security awareness testing Ability to perform business logic assessments and identify flaws beyond automated scanning Strong communication skills, including the ability to translate technical findings into executive-level reports Preferred Certifications One or more of the following certifications are highly desirable: OSCP Offensive Security Certified Professional OSEP Offensive Security Experienced Penetration Tester CRTP / CRTO Certified Red Team Professional / Operator OSWA / GWAPT Web Application Security Certs Professional Attributes Excellent analytical and problem-solving skills High degree of attention to detail Strong written and verbal communication skills Self-motivated with a proactive approach to learning and threat research Comfortable working both independently and in collaborative team settings

Consultant - MAST Vanguard Requirements: Mandatory Technical & Functional Skills Strong knowledge on manual secure code review against common programming languages (Java, C#) Minimum three (3) years of recent experience working with application tools to perform security tests: AppScan, NetsSparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, Kali Linux, or equivalent. Minimum three (3) years of performing manual penetration testing and code review against web apps, mobile apps, and APIs Minimum three (3) years of working with technical and non-technical audiences in reporting results and lead remediation conversations. Preferred one year of experience in development of web applications and/or APIs. Should be able to identify and work with new tools / technologies to plug and play on client projects as needed to solve the problem at hand. One or more major ethical hacking certifications not required but preferred; GWAPT, CREST, OSCP, OSWE, OSWA Job Description: Roles & responsibilities Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications Perform manual security code review against common programming languages (Java, CSharp). Perform automated testing of running applications and static code (SAST, DAST). Experience in one or more of the following a plus: AI pen testing. Need to work on application tools to perform security tests: AppScan, NetsSparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, Kali Linux. Able to explain IDOR, Second Order SQL Injection, CSRF Vulnerability, Root cause, Remediation

Roles & responsibilities • Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications • Plan and execute network penetration testing and Red teaming assessments to simulate real-world attack scenarios. • Perform manual network and application penetration tests on internal network, Active Directory environment, web applications. • Perform social engineering assessment to assess the security awareness and physical security controls of the organization. • Ability to independently research for new vulnerabilities in systems and software and modify and customize tools, known exploits, POCs and scripts to meet operational requirement. • Research and stay up-to-date with the latest attack techniques, tools, and emerging threats. • Present technical reports to clients, explaining the outcomes of the testing and providing detailed insights and recommendations. • Collaborate effectively with cross-functional teams, including developers, IT operations, and business stakeholders to integrate security best practices seamlessly into project workflows. • Provide mentorship and guidance to junior security staff and foster a culture of proactive security awareness within the organization. This role is for you if you have the below • We are seeking an experienced and highly skilled Consultant with over 5+ years of working experience in the field of cybersecurity, including network penetration testing, vulnerability assessment, Active directory testing, phishing assessment and web application penetration testing. The ideal candidate will possess a strong working knowledge of Network protocols, performing OSINT to identify publicly available information and testing and exploiting Microsoft services like Windows Servers, Active directory, Certificate Services. Mandatory technical & functional skills JOB DESCRIPTIONS • Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs, internal and external networks, and mobile applications • 5+ years of professional experience in cybersecurity, with a focus on Network penetration testing and Red teaming. • Strong understanding of Network protocols, web applications, cryptography, various operating systems and security technologies. • Strong understanding of exploitation of Microsoft platform used in enterprise environment such as windows Servers, Active Directory Certificate Service, Azure, etc. • Experience in one or more of the following a plus: Web application penetration testing, mobile application penetration testing application architecture and business logic analysis. • Relevant certifications, such as GWAPT, OSCP, OSEP, CRTP, CRTO, OSWA, are strongly preferred.

What youll be doing... Verizon Cyber Security Team is looking for a Penetration Tester to join our Application Pen Test team. Youll be joining a group of talented, creative thinkers who "act like the enemy" to focus on ensuring that infrastructure and applications (web, mobile, and API) are secure by performing penetration testing from both inside and outside of Verizon. . This team isnt a "copy and paste from a scan tool" reporting team, or a cookie cutter just scanning with tools team, or a team that just monitors and supports security scanning tools used by developers. This team is an enterprise-recognized and supported group of skilled, experienced and certified ethical hacking Verizon employees who are trusted to direct themselves with a lot of unknowns. The successful candidate will possess an effective aptitude in thinking like an adversary, security of Web applications, Infrastructure, APIs and Mobile Applications, mentoring and leading junior pen testers and effectively translating highly technical information to internal customers in a way that supports Cyber Security Team and broader Verizon goals. The ability to lead and perform full scope penetration testing on complex web applications, Infrastructure, APIs and Mobile applications. Configuring and safely utilizing attacker tools, tactics, and procedures for Verizon environments. Developing comprehensive and accurate reports and presentations for both technical and executive audiences. The ability to make collaborative decisions on the impact of an exposure to Verizon. Acting as a SME and guide, advising on security vulnerability impact, ratings and remediation recommendations across the organization as needed. Helping define the Pen Test strategy and standards to further enhance the companys security posture. Effectively communicating findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel. Working closely with stakeholders and developers providing risk-appropriate and pragmatic recommendations to correct found vulnerabilities. Developing scripts, tools, or methodologies to enhance Verizons pen testing processes and effectiveness. Driving technical oversight and mentoring junior pen testers on pen test engagements, vulnerability impact and ratings and remediation recommendations. Providing leadership and guidance to advance the offensive capabilities of the team and its subsequent ability to defend the Verizon Enterprise. What were looking for... Youll need to have: Bachelor's degree and four or more years of work experience. Four or more years of relevant work experience. Relevant pen testing or security experience. Deep understanding of OWASP Top 10, OWASP API Top 10, MASVS. Even better if you have one or more of the following: Strong knowledge of tools used for API, infrastructure, web application, mobile, and network security testing, such as Kali Linux, Metasploit, Wireshark, Burp suite, Cobalt Strike, Nessus, Web Inspect, SQLMap. Knowledge of secure software deployment methodologies, tools, and practices. Experience with application security risk procedures, security patterns, authentication technologies and security attack pathologies. Certifications such as: GXPN, GPEN, eWPT, GCIH, GWAPT, OSCP, OSWA, OSCE, OSWE. Service Delivery/Governance: ITILv2/3. Solid understanding of common hosting environments such as containerization platforms (e.g., Docker and Kubernetes) and virtual machines running under hypervisors. An implementation level familiarity with all common classes of modern exploitation. Mastery of Unix/Linux/Mac/Windows operating systems, including bash and Powershell. Programming skills preferred and encouraged, as well as the ability to read and assess applications written multiple languages, such as Python, JAVA, .NET, C#, or others. Experience with system and application security threats and vulnerabilities and secure configuration management techniques, software debugging principles, software design tools, methods, and techniques, software development models (e.g., Waterfall Model, Spiral Model). Knowledge of secure coding techniques. Some experience with software related information technology (IT) security principles and methods (e.g., modularization, layering, abstraction, data hiding, and simplicity/minimization). Knowledge of secure software deployment methodologies, tools, and practices. Knowledge in discerning the protection needs (i.e., security controls) of information systems and networks.