Senior Managing Penetration Testing Consultant - X-Force Red

Role Overview

The Global Security Consultant at X-Force Red, IBM Security, plays a crucial role in identifying and exploiting vulnerabilities in modern enterprise applications. This position involves performing penetration tests against various types of applications, including web, mobile, and thick-client systems. The consultant also assists in the sales process and acts as a primary technical contact for projects.

Responsibilities

• Perform penetration tests against clients' applications, including web, mobile, and thick-client systems.
• Assist in the sales process with potential or existing clients.
• Act as a client's primary technical contact for projects delivered by other consultants.
• Provide subject matter expertise through research, tooling, and consulting engagements.
• Rapidly learn new technologies and processes with minimal assistance.

Requirements

• 10+ years of penetration testing experience.
• 10+ years of consulting experience.
• Experience testing modern enterprise applications across a variety of frameworks and platforms.
• Ability to identify vulnerabilities in these applications and exploit them to gain access to sensitive data or systems.
• In-depth knowledge and experience in testing web applications, plus at least one of the following: internal networks, wireless networks, mobile applications, thick-client applications, embedded applications, hardware.
• Programming experience in one or more of the following: Java, .Net, Python, or Ruby.
• A strong understanding of networks, firewalls, protocols, routing, and security technologies.
• A history of presenting at regional or major security conferences.
• A history of publishing research, blog posts, or other publications.
• Experience coordinating security testing projects with multiple consultants.
• Effective communication and presentation skills.
• The ability to lead large groups and be a primary facilitator.
• Demonstrated written skills.
• A drive to do research, publications, blogs, presentations, etc.
• Comfortable working in a project-based/client-serving model.
• The ability to lead and shape client expectations.
• Help drive pursuits and engage in complex deals, matching outcomes to expectations.
• The ability to work easily with diverse and dynamic teams.
• The ability to self-start and work independently on projects.

Preferred Technical and Professional Experience

• Experience testing GenAI applications and LLM models.
• Experience with testing SaaS platforms and applications such as SAP, Salesforce, Oracle.
• OSCP, OSEP, OSWE, OSED, OSEE, Burp Suite Certified Practitioner, or other technical certifications.
• Experience in reverse engineering software or hardware.