Section Manager - Penetration Tester (Lotus office)

<ul><li>Conduct penetration testing and security assessments across web applications, internal infrastructure, Active Directory, cloud environments, and network infrastructure to identify security vulnerabilities.</li></ul><ul>
<li>Perform adversary emulation and purple team exercises by collaborating with SOC and Blue team to validate detection capabilities and improve incident response.</li>
<li>Assess the security posture of Active Directory, Microsoft Entra ID, cloud platforms (AWS, Azure, GCP), and identity infrastructure against common attack techniques.</li>
<li>Support the development and tuning of detection rules for SIEM, EDR, Identity Protection, and other security monitoring platforms.</li>
<li>Prepare technical reports and present security findings, risks</li>
</ul><h2>Requirements</h2><ul>
<li>Bachelor's or associate degree in IT, Computer Science, or related field.</li>
<li>At least 5+ years of experience in security design, operation or implementation</li>
<li>Strong knowledge of current cyber threats, attack techniques, security controls, and enterprise IT infrastructure across Windows, Linux, Active Directory, cloud, and network environments.</li>
<li>Strong understanding of the MITRE ATT&amp;CK Framework, Cyber Kill Chain, and OWASP Top 10, with the ability to emulate attacker techniques and validate security controls.</li>
<li>Experience with common penetration testing tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Mimikatz, or equivalent</li>
</ul>