Offensive Security Consultant

Konica Minolta Business Solutions Canada; Kansas City (MO); On-site; USD 80,000 - 100,000; Full time

Job summary

Konica Minolta Business Solutions Canada is seeking an Offensive Security Consultant passionate about identifying vulnerabilities. This role involves performing various types of penetration tests and enhancing the security posture of clients.

The ideal candidate has at least 2 years of experience in penetration testing, is familiar with OWASP and SANS frameworks, and demonstrates strong communication skills. Join a team of experts dedicated to making a positive impact on organizations' security.

Qualifications

• 2+ years’ full-time penetration testing experience.
• Familiarity with OWASP Top 10 and SANS Top 25.
• Excellent communication skills in various formats.

Responsibilities

• Deliver Application Penetration Tests against various applications.
• Perform Network Penetration Tests for clients.
• Communicate effectively with customers throughout the testing process.

Skills

Penetration testing experience

Communication skills

Burp Suite expertise

Kali Linux

Vulnerability assessment

Tools

GitHub

Job description

Overview

Offensive Security Consultant

Hack. Discover. Advise. Make an Impact.

Position Summary

Are you passionate about breaking things to make them stronger? Do you thrive on uncovering vulnerabilities before threat actors do? We're looking for a highly motivated Offensive Security Consultant to join our growing team of security experts. This is an opportunity to work with diverse clients, tackle challenging environments, and make a direct impact on organizations' security postures.

Offensive Security Consultant candidates are motivated offensive security professionals, often with 2-5 years of pen testing experience not counting previous IT experience.

The primary role is to perform External Network Penetration Tests as well as Application Penetration Tests against web applications, mobile applications, and web services.

Security Consultants are expected to execute the appropriate testing methodology, identify risk at a level commensurate with the company bar, perform punctually, clearly document findings for multiple audiences, and demonstrate outstanding customer service skills.

Responsibilities

• Deliver Application Penetration Tests against web apps, mobile apps, web services, and fat-clients
• Perform small to medium-sized Network Penetration Tests for clients who have proven adept at application penetration testing
• Communicate with customers in a friendly manner, quickly and clearly, and with great accuracy during kick‑off and scoping calls, assessment status updates, ongoing project communication, report delivery, wrap‑up meetings, and non‑billable events such as lunches, conferences, and meetups
• Work toward professional-level certifications such as the OSCP if not already achieved
• Assist in enhancing various company methodologies and other documentation
• Work with project management to enhance the company’s overall efficiency
• Assist peers in identifying/exploiting issues during assessments
• Demonstrate excellent writing skills both during email correspondence and report creation
• Prioritize findings based on perceived risk, using existing knowledge of clients’ business to ascertain finding severity
• Lead by example in behavior, work ethic, and punctuality
• Interpret and obey any applicable customer testing restrictions based on scope and kickoff calls
• Utilize non‑billable time to work on company‑directed internal projects
• Develop and own an area of expertise e.g. web services, SQL injection, mobile apps, PowerShell, reporting, Java, XXE, etc.
• Contribute to company methodology and vulnerability repositories

Qualifications

• 2+ years’ full-time penetration testing experience
• Full familiarity with OWASP Top 10 and SANS Top 25
• Preferred certifications: OSCP, OSCE, SANS, CREST, etc.
• Public disclosure track record preferred
• Excellent communication skills in written, verbal, and in‑person formats
• High‑level knowledge of common platforms and their vulnerabilities
• Burp Suite expert
• Ability to configure working login macros
• Use Repeater and Intruder to manually find flaws
• Use Scanner appropriately to automatically find flaws
• Quickly eliminate false positives based on intuition and response content
• Kali Linux
• GitHub
• Research
• Search for flaws in fingerprinted services/components
• Find exploits in vulnerable fingerprinted services/components
• Use existing research to craft proof of concepts for assessments
• Ability to alter existing exploits so they apply to different assessment targets

Equal Opportunity Statement

Konica Minolta is an equal opportunity and affirmative action employer. We consider all qualified applicants for employment without regard to race, color, religion, creed, national origin, sex, pregnancy, age, sexual orientation, transgender status, gender identity, disability, alienage or citizenship status, marital status or partnership status, genetic information, veteran status or any other characteristic protected under applicable law.