- Information security architect / penetration tester with a firm grasp of Linux and Windows; as well as mobile (Blackberry-legacy, iOS, Android, and Purism-pure Linux based mobile). • SSDLC Security Architecture projects responsible for security requirements, architecture design, SAST and DAST scan reviews in support of GDPR• Performs web application, API endpoint, and cloud environment penetration testing, remediation testing and vulnerability scans• Supervises tier one, third-party SOC services and provides tier three incident response support to the Information Security team• Create process automation for the SOC team’s duties where appropriate (i.e., for Qualys/Cylance/Etc.)• Perform internal and external penetration tests against client web applications, network infrastructure, Windows, *nix variants, and Android to discover and exploit vulnerabilities• Create comprehensive and accurate penetration testing reports with recommendations for appropriate remediation• Collaborate with platform owners in a consultative manner to work toward remediation of the issues identified in testing• Develop scripts, tools, and methodologies to enhance the penetration testing processes & overall security posture• Develop and maintain the penetration testing team’s processes and documentation• Perform regular maintenance of documentation and provide process improvements to the penetration testing processes on a regular basis• Perform well known and proof of concept exploitation techniques • Create new chained methods for the exploitation and post exploitation process to better illustrate the value of identified vulnerabilities• Provided findings to client leadership and aid in the appropriate prioritization of what is discovered• Provide a better understanding of the risk and financial impact associated with each finding in terms that are meaningful to our client’s senior leadership