Perform penetration testing of web, mobile, thick-client, and API applications; conduct source-code review, white-box testing, reverse engineering, SAST and DAST; validate scanner findings and investigate application, cloud, and infrastructure weaknesses. Develop detailed technical reports, recommend remediations, and present findings to technical and executive audiences. The role requires strong application-security expertise, continual learning, client communication, and offensive-security proficiency.

Conduct hands-on penetration tests of embedded and IoT hardware, including debug-interface access, firmware extraction, bus analysis, reverse engineering, side-channel testing, and fault injection. Analyze physical attack surfaces, identify vulnerabilities, build test tooling, and produce actionable technical reports. Advise clients on remediation, communicate findings to technical and executive audiences, contribute to security research, and help mature the firm's hardware-testing methodology.

Plan, execute, and report on infrastructure penetration tests, cloud security assessments, Active Directory assessments, red team operations, and adversary simulations. Assess on-premises, hybrid, and cloud environments, identify and validate vulnerabilities, demonstrate business impact, and provide remediation guidance. Prepare technical reports and presentations for technical and executive stakeholders while contributing to offensive security methodologies, tooling, automation, research, and knowledge sharing.