Senior Offensive Security Engineer (Web & API)

This role involves conducting manual penetration testing on web applications, REST/SOAP APIs, and production environments to validate vulnerabilities and produce clear, reproducible evidence. The engineer will assess authorization across roles and accounts, identify exploitable weaknesses, and explain their impact while adhering to strict rules of engagement. The position requires strong expertise in OWASP standards, Burp Suite, and SSO-protected applications, with a focus on safe testing and regulatory-ready reporting.