Senior International Vulnerability Assessment Specialist

Designing custom scan policies for complex environments, automating scanning via APIs, troubleshooting difficult scan failures, and integrating results with other security platforms.

Managing scanner appliances, creating advanced scan profiles for different asset types, and building custom dashboards for vulnerability reporting and trend analysis.

Developing custom Metasploit modules for specific targets, performing advanced exploitation of identified vulnerabilities during penetration tests, and validating scanner findings.

Performing advanced manual web application penetration testing, including complex authentication bypasses, business logic flaws, and API security assessments.

Conducting adversary simulation and red team exercises in controlled environments, demonstrating post-exploitation techniques and lateral movement.

Writing advanced Nmap Scripting Engine (NSE) scripts for custom network discovery, service enumeration, and vulnerability identification beyond standard scans.

Performing complex OSINT (Open Source Intelligence) link analysis, mapping infrastructure, and identifying relationships between various digital assets and threat actors.

Building custom Jira workflows for vulnerability lifecycle management, creating automated reports and dashboards linking Jira data to scanner outputs, and tracking remediation efforts globally.

Creating and maintaining detailed documentation for assessment methodologies, technical findings, remediation playbooks, and knowledge sharing across the security team.

• Infrastructure and Operations Teams
• Software Development Teams (DevOps/SecDevOps)
• Security Operations Centre (SOC)
• Internal Audit and Compliance
• Product Management (for application security)

• External Penetration Testing Vendors
• Security Tooling Providers
• Industry Peers (for threat intelligence sharing)

Organisations are moving beyond simple penetration tests to full-scope adversary simulations that mimic real-world threat actors. This requires a deeper understanding of TTPs (Tactics, Techniques, and Procedures) and the ability to operate stealthily.

Threat Intelligence Integration · Evasion Techniques · Post-Exploitation & Lateral Movement · Reporting for Defensive Teams · Operational Security (OpSec)

• This week: Start exploring advanced offensive security frameworks and tools like Empire, BloodHound, or Sliver.
• This month: Participate in a capture-the-flag (CTF) event focused on red teaming or active directory exploitation.
• Month 2: Research and present on a specific advanced persistent threat (APT) group's TTPs and how we could simulate them.
• Month 3: Begin contributing to our internal red team playbooks or developing custom tools for adversary simulation.

Quick win: Familiarise yourself with the MITRE ATT&CK framework's enterprise matrix and map some of your recent findings to specific TTPs.

To handle the sheer volume of security alerts and findings, automation is key. Integrating vulnerability data into SOAR platforms allows for faster triage, automated remediation actions, and more efficient incident response workflows.

Playbook Development · API Integration · Automated Remediation Workflows · Alert Enrichment · False Positive Suppression

• This week: Research common SOAR platforms (e.g., Splunk SOAR, Palo Alto Cortex XSOAR) and their vulnerability management capabilities.
• This month: Map out a current manual vulnerability triage process and identify steps that could be automated via a SOAR playbook.
• Month 2: Work with our SOC team to understand their existing SOAR playbooks and identify opportunities for vulnerability data integration.
• Month 3: Develop a proof-of-concept for an automated vulnerability remediation workflow within a sandbox SOAR environment.

Quick win: Identify one simple, repetitive task in your current vulnerability workflow (e.g., creating a Jira ticket for a specific type of finding) and explore how it could be automated with a simple script or low-code tool.