Sr. Security Analyst

• Lead and manage large, complex penetration testing and security testing engagements end-to-end.
• Act as the primary technical and engagement lead for key client accounts.
• Ensure timely delivery, quality assurance, and stakeholder communication throughout project lifecycles.
• Provide mentorship and guidance to junior and mid-level consultants.

• Perform and review web, mobile, API, network, cloud, and configuration security assessments.
• Maintain technical excellence across multiple service lines, staying updated on the latest vulnerabilities, tools, and attack techniques.
• Conduct business logic reviews, threat modeling, and red teaming exercises as needed.

• Act as a trusted advisor to clients, providing strategic security recommendations and actionable insights.
• Be ready for onsite visits, workshops, and executive-level presentations when required.
• Handle sensitive engagements with professionalism and discretion.

• Support RFP responses, proposal writing, and technical solutioning.
• Participate in client sales meetings and scoping discussions.
• Provide accurate effort estimations and help define delivery models.

• Contribute to the development and refinement of security testing services and methodologies.
• Drive internal initiatives to improve quality, efficiency, and innovation in service delivery.
• Create technical content, whitepapers, or knowledge base articles to support team growth.

• 3–5 years of hands-on experience in penetration testing or offensive security.
• Proven track record of leading complex security assessments with large clients.
• Expertise in Web, Mobile, Network, API, Cloud, Configuration Reviews, and/or Red Teaming.
• Familiarity with security standards such as OWASP, PTES, NIST, and MITRE ATT&CK.
• Strong communication and client-facing skills.
• Experience supporting presales efforts, including proposals, SOWs, and client discussions.
• Certifications such as OSCP, OSWA, CRTO, CREST CRT/CCT, or similar are preferred.

ValueMentor