Senior Offensive Security Consultant (Web App/API)

HALOCK Security Labs; United States; On-site; USD 100,000 - 150,000; Full time

Job summary

HALOCK Security Labs is looking for a Senior Offensive Security Consultant for a full-time remote role. This position focuses on web application and API penetration testing. You will be responsible for conducting assessments, developing custom exploits, and delivering technical reports that convey risks and remediation strategies. You will also contribute to HALOCK's testing methodologies and represent the practice in client meetings. Ideal candidates should be hands-on testers, with ownership from scoping through report delivery.

Qualifications

• Proven experience in manual web application and API penetration testing.
• Ability to develop custom proof-of-concept exploits.
• Proficiency in producing technical reports and executive summaries.

Responsibilities

• Conduct manual web app and API assessments.
• Develop custom proof-of-concept exploits when standard tooling is insufficient.
• Produce clear technical reports and business risk remediation guidance.

Job description

Role Description

This is a full-time remote role for a Senior Offensive Security Consultant focused on web application and API penetration testing. You will conduct manual web app and API assessments, develop custom proof-of-concept exploits when standard tooling falls short, and produce technical reports and executive summaries that translate findings into clear business risk and remediation guidance. You will contribute to HALOCK's testing methodology and framework, stay current on emerging threats and attacker TTPs, and represent the practice professionally in client-facing kickoff and delivery meetings. This role is for someone who tests manually, understands their methodology, and can own an engagement from scoping to report delivery with minimal oversight.