Conduct penetration testing for web applications, APIs, cloud, mobile, and internal systems using manual and automated techniques. Identify and validate vulnerabilities, develop proof-of-concept exploits, document attack paths, and support remediation and retesting. Produce actionable reports, prioritize risks, improve testing methodologies and tooling, administer DAST, SAST, and SCA tools, and enhance Python-based security workflow automation.

Operationalize cyber threat intelligence by triaging intelligence, enriching indicators, monitoring threats, profiling threat actors and malware, and mapping activity to MITRE ATT&CK. Support adversary emulation, purple team exercises, SOC investigations, threat hunting, third-party risk, fraud operations, tabletop exercises, and online impersonation monitoring. Communicate intelligence findings, maintain threat documentation, and recommend improvements to detection and response capabilities.