JOB SUMMARY
Serve as the technical subject matter expert for penetration testing opportunities. Work closely with Account Executives, Sales Teams, Solution Architects, Project Managers, and customers to understand requirements, define scope, prepare Statements of Work (SOWs), estimate effort, support proposal creation, and present penetration testing solutions. Act as the bridge between sales and delivery teams.
TESTING AREAS & SPECIALIZATIONS
Application Security Testing
- Web Application Penetration Testing
- API Penetration Testing
- Mobile Application Security Testing
Network Security Testing
- External Network Penetration Testing
- Internal Network Penetration Testing
- Wireless Security Assessments
Identity & Access Security Testing
- Active Directory Security Assessments
- Microsoft Entra ID Security Assessments
- Hybrid Identity Security Assessments
- Okta Security Assessments
- CyberArk Security Assessments
Cloud Security Testing
- Microsoft Azure Security Assessments
- AWS Security Assessments
- Cloud Configuration Reviews
- Cloud Exposure Assessments
Social Engineering Assessments
- Phishing Campaign Assessments
- Spear Phishing Assessments
- Vishing (Voice Phishing) Assessments
- Smishing (SMS Phishing) Assessments
- User Awareness & Susceptibility Testing
Advanced Security Testing
- Assumed Breach Assessments
- Privilege Escalation Testing
- Lateral Movement Testing
- Attack Path Analysis
- Security Control Validation
OPERATIONAL RESPONSIBILITIES
- Participate in customer discovery calls to understand security assessment requirements, business objectives, and technical environments.
- Conduct scope definition activities for web applications, APIs, internal networks, external networks, cloud environments, Active Directory, Microsoft Entra ID, wireless, and social engineering assessments.
- Review customer requirements and translate them into penetration testing engagement scopes and deliverables.
- Define assumptions, constraints, exclusions, dependencies, and Rules of Engagement.
- Develop Statements of Work (SOWs), scope documents, level-of-effort estimates, and service descriptions.
- Calculate testing effort based on applications, IP ranges, APIs, cloud resources, identities, and testing complexity.
- Support proposal creation, RFP/RFI responses, and technical solution documentation.
- Work with delivery teams to validate effort estimates, schedules, staffing requirements, and testing approaches.
- Present proposed solutions during customer meetings and technical discussions.
- Provide guidance on testing methodologies, deliverables, risk considerations, and industry best practices.
- Support customer workshops, security assessments, and advisory engagements during the sales cycle.
- Assist with service catalog development, testing packages, and standard pricing models.
- Maintain knowledge of emerging threats, penetration testing services, and market trends.
- Participate in transition meetings to hand off opportunities to delivery teams after project award.
EDUCATIONAL REQUIREMENTS, TOOLS & CERTIFICATIONS
Education: Diploma/bachelor’s degree in computer science, Information Technology or equivalent experience.
Experience:
- 6–10 years in Penetration Testing, Security Consulting, or Cybersecurity Pre-Sales.
- Experience scoping and estimating penetration testing engagements.
- Experience supporting US-based customers and working USA hours.
- Strong customer-facing experience.
Tools & Technologies:
- Primary VM Tools: Tenable, Rapid7 / InsightVM
- Patch / Remediation Tools: Tanium, Automox
- Risk & GRC: TruOps, Cyberfusion
- IAM / PAM: Okta, CyberArk
- Endpoint Security: CrowdStrike, SentinelOne
- Penetration Tools: Burp Suite Professional, OWASP ZAP, Nmap, Metasploit, BloodHound, sqlmap, Nessus
- Scripting and Automation: Python, Powershell, Bash
- Reporting: Power BI, Excel, PowerPoint, Visio
Certifications:
- OSWE, CRTP / CRTE , CISSP, CEH, Security +, OSCP, Azure Security Certifications (Preferred)