Tennessee

Cybersecurity Jobs in Tennessee

32 jobs found

Include remote jobs

Today

Cyber Security Engineer

Regions Nashville, TN

Nashville, TN

Today

$89k - $123k/yr Full time Cloud Platforms Cyber Security Engineer Cybersecurity Tools

Apply Now

Job Description

Support security solutions across cloud applications, infrastructure, platforms, and related technologies within the Cyber Security organization at Regions.

Responsibilities

Design, implement, and support relevant cyber security technology solutions
Provide technical administration, including troubleshooting, break-fix support, patching, and day-to-day application activities
Stay current on industry trends and assess organizational objectives and needs
Maintain operational documentation and reports to support monthly trend analysis and project components
Assist with research, proof-of-concept, selection, and implementation of technology solutions; analyze pros and cons and evaluate build vs buy options
Identify opportunities to implement new technologies and methods that improve business processes, efficiency, effectiveness, and customer value
May support security incident response activities and post-event reviews
Partner with subject-matter experts to design, implement, and maintain security solutions for business areas, project teams, and vendors
Participate in evaluating the technology vision, opportunities, challenges, and the impact on security standards within the Cyber Security organization
Support relevant metrics, controls, and governance administration related to cyber security technologies
Participate in on-call rotation for relevant cyber security technologies
Adhere to operational processes, standards, and procedures
Ensure compliance with risk management programs, rules and regulations, and cybersecurity practices; support process improvements and apply disciplined change management practices
May provide guidance and advice to junior engineers

Requirements

High School Diploma or GED
Six (6) years of related post-secondary education and/or experience in Information Security and/or Information Technology

Technologies

CISSP, CompTIA Security+, CCNA, MCSA
RedHat Linux, AIX, Solaris, Oracle Linux, UNIX
IAM, BoKS, CyberArk, Delinea, VAS, SailPoint, Okta
PAM, SUDO, Role Based Access Control
AWS IAM, Azure AD
Python

Skills and Competencies

Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance
Ability to prioritize conflicting demands
Knowledge of common web technologies, cloud technologies, and enterprise and network architecture
Knowledge of defense in depth, trust levels, privileges, and permissions
Knowledge of modern security tools and controls
Problem-solving skills to develop sound solutions to issues
Strong verbal, written communication, and organizational skills
Strong analytical and evaluative thinking capability

Preferred Qualifications

Bachelor’s degree in Information Technology, Information Security, Information Systems Management, Computer Science, Engineering, or related field
Applicable technology and/or security certifications (e.g., CISSP, CompTIA Security+, CCNA, MCSA)
Experience supporting more than one OS type (RedHat Linux, AIX, Solaris, Oracle Linux, etc.) in an enterprise environment
Advanced understanding of IAM concepts, especially Least Privilege
Experience with at least one UNIX Identity Management solution (BoKS, CyberArk, Delinea, VAS, etc.) preferred
Familiarity with enterprise tools such as SailPoint and Okta, or similar
Advanced understanding of UNIX permissions, file ownership, PAM, user/group management
Understanding of SUDO policies and privilege delegation
User provisioning and deprovisioning processes
Shell scripting experience (Python experience a plus)
Familiarity with Role Based Access Control
Understanding of Cloud IAM concepts (AWS IAM, Azure AD)

Benefits

Paid Vacation/Sick Time
401K with Company Match
Medical, Dental and Vision Benefits
Disability Benefits
Health Savings Account
Flexible Spending Account
Life Insurance
Parental Leave
Employee Assistance Program
Associate Volunteer Program

Position Details

Exempt from timekeeping requirements under the Fair Labor Standards Act; not eligible for overtime pay
Onsite role, now or in the near future
Regular work hours, including full days in the office three or more days a week
Manager sets the work schedule, including in-office expectations
No relocation assistance provided; relocation would be at your expense
Available locations: Birmingham, AL; Atlanta, GA; Nashville, TN; or Charlotte, NC
No work visa sponsorship for this position at this time
Applicants must be currently authorized to work in the United States full-time
May be filled at a higher level depending on qualifications and relevant experience

Compensation

USD 89,329 - 122,940 per year

Location

Riverchase Operations Center, Hoover, Alabama
Nashville, TN (onsite)

View full job page →

14d ago

Cybersecurity Analyst

Vanderbilt Health Nashville, TN

Nashville, TN

14d ago

Full time Cyber Forensics Cyber Security Cybersecurity Tools

Apply Now

Job Description

Vanderbilt Health is seeking a Cybersecurity Analyst to support onsite security operations in Nashville, TN. In this role, you will help safeguard infrastructure by investigating incidents, assessing vulnerabilities, and analyzing threats, often working with occasional guidance when conducting more complex forensic and discovery activities.

The position focuses on practical security work across computer forensics, electronic discovery, and threat analysis, along with troubleshooting and resolution of complex security issues. You will also contribute to small and medium technology projects or components of larger initiatives.

Key Responsibilities

Conduct computer investigations.
Respond to and/or mitigate security breaches and attacks to the infrastructure.
Perform vulnerability and threat analysis for the environment.
Troubleshoot and resolve complex security issues.
Conduct computer forensic investigations, data recovery, and electronic discovery under occasional guidance.
Conduct small and medium scale vulnerability assessments and threat analysis for the environment.
Implement small and medium technology projects or components of large projects.

Required Qualifications

Minimum 2 years of experience.
Bachelor's degree.
Ability to solve medium to complex problems.
Ability to demonstrate Anomaly Detection practices in practical applications of moderate difficulty.
Capable of using Intrusion Detection Systems software.
Ability to demonstrate Network Forensics in practical applications of moderate difficulty.
Demonstrates the ability to respond quickly to reports from individuals.
Takes immediate action to stop an incident from continuing or recurring.
Determines whether an incident should be handled locally or reported to the IT Security Response Team.
Works with IT support staff to repair a system, restore service, and preserve evidence of the incident.
Handles sensitive and other critical responses in a professional manner.
Evaluates and documents investigation findings after resolving an incident.
Possesses sufficient fundamental proficiency to successfully demonstrate Malware Analysis in practical applications of moderate difficulty.
Has determined the behavior and purpose of a simple malware threat and eliminated it from the company’s computers.
Familiar with Dynamic Analysis and Static Analysis.
Has used basic Malware Analysis tools and products.
Demonstrates the ability to review basic Internet connections and internal networks to identify standard hacker/cracker threats.
Able to review the configuration of server and major network applications to identify configuration errors and other issues that weaken organizational systems and increase misuse likelihood.
Has conducted an assessment of at least one of the following: access controls; password controls; connectivity controls (e.g., open ports/enabled protocols); inappropriate files (including viruses, worms, Trojan horses, bootleg software, music files, inappropriate image files); unpatched software, bringing attention to available security-related patches that have not been deployed.
Basic knowledge of several of the following: network foot-printing, port scanning, and enumeration techniques, specific operating system vulnerabilities [like Win-NT, *nix, Win-2K, Solaris], web server vulnerabilities, application level exploits, worms, viruses, and Trojans, network vulnerabilities, sniffing, wireless sniffing, IP spoofing, and PPTP/VPN breaking.
Generate security reports for management that show system safety and incident reporting.

Technical Skills and Tools

Intrusion Detection Systems
Dynamic Analysis
Static Analysis
PPTP/VPN breaking

Vulnerability Assessments

Demonstrates the ability to review basic Internet connections and internal networks to identify standard hacker/cracker threats.
Able to review server and major network application configurations to identify errors and weaknesses.
Generate security reports for management covering system safety and incident reporting.

Work Context

This role executes responsibilities with an understanding of how work impacts other areas within the own job area or team, with occasional guidance. You will also provide informal guidance and support to team members and contribute to continuous improvement through learning and applying experience to uncover underlying causes and improve outcomes.

Benefits

A comprehensive benefits package, which may include health, disability, retirement, and wellness offerings.

View full job page →

15d ago

Senior Network Security Engineer

HCA Healthcare Nashville, TN

Nashville, TN

15d ago

Full time Senior Computer Network Defense Cyber Security

Apply Now

Job Description

HCA Healthcare is hiring a Senior Network Security Engineer in Nashville, TN (onsite) to lead and improve enterprise network security controls and risk reduction initiatives.

Responsibilities

Lead implementation, modernization, standardization, and enhancement of network security controls to protect a Fortune 100 enterprise infrastructure, patients, and data from evolving risk and threats.
Perform and oversee reviews and assessments of security policies to identify risk, vulnerabilities, and hardening opportunities; provide remediation recommendations, designs, and solutions.
Implement configuration changes supporting continuous security control maturity and ongoing risk reduction.
Partner with other IT teams to apply risk management practices, optimize technology solutions, monitor infrastructure, and align with current and future needs.
Ensure compliance with regulatory requirements and support long-term security posture and control maturity planning.
Evaluate, recommend, and implement security measures including next-generation firewall capabilities, IDS/IPS, VPN, network segmentation and zero trust, and multifactor access control mechanisms.
Conduct firewall rule reviews, security audits, baseline and best-practice compliance checks, and forensic network investigations to support data transmission adherence.
Support and manage network security solutions aligned to regulatory and industry requirements such as PCI DSS, SOX, NIST, ISO 27000, and HIPAA.
Assess vulnerability findings, penetration test results, security metrics, and audit outcomes to identify hardening needs and provide remediation recommendations.
Recommend and implement complex solutions and enterprise-wide configuration changes to improve continuous security control maturity.
Participate in incident response activities and disaster recovery planning and testing.
Collaborate across IT teams to ensure network security controls integrate with other systems and applications and meet security standards.
Routinely run audits and control tests on deployed technologies; collect and consolidate performance indicators, risks, and trends; provide recommendations and baseline/regulatory compliance ratings.
Manage relationships with vendors and contractors to ensure timely delivery of security services in alignment with security policies.
Contribute to development and documentation of security policies and procedures; support training and awareness efforts.
Provide guidance and training to peers on compliance requirements and best practices.
Research security design enhancements and identify automated solutions or best-of-breed technologies; support vendor integration tests.
Stay current on threats, vulnerabilities, regulations, and industry best practices; implement recommendations to strengthen security posture and control maturity.

Requirements

Bachelor’s degree preferred
5+ years of experience required
Extensive experience with security technologies including next-generation firewalls, intrusion detection/prevention systems, VPN, network segmentation, access control mechanisms, and network security design, management, best practices, and policy standards in large 1000+ firewall environments
Expertise with Checkpoint Firewall and related platforms: CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco Network Security products and technologies such as Firepower, ASA, VPN, WSA, ISE, Stealthwatch
Strong understanding of network protocols, topologies, tools, subnetting, and architectures
Experience with network security policy management tools (Algosec, Tufin) and/or conducting risk assessments, firewall rule review, and security audits
Strong knowledge of enterprise security technologies and processes including Zscaler, advanced threat detection tools, Antibot, antimalware, threat emulation, SIEM, IDS/IPS, network packet analysis, Netflow
Experience designing solutions for security standards and frameworks including HIPAA, SOX, PCI DSS, HITECH, ISO/IEC 27001, and the NIST Cybersecurity Framework
Network security management tools/technologies such as Splunk, Trustsec, segmentation, and syslog
Excellent verbal and written communication, interpersonal, analytical, and problem-solving skills
Demonstrated leadership and mentorship skills, including ability to guide and train junior engineers
Ability to work independently and as part of a team
Relevant certifications from ISC2 (CISSP), GIAC (GISP), ISACA (CISA), Cisco Security, or CompTIA are a plus

Technologies

Next-generation firewalls
Intrusion detection/prevention systems (IDS/IPS)
VPN
Network segmentation/zero trust
Multifactor and access control mechanisms
PCI DSS, SOX, NIST, ISO 27000, HIPAA
Checkpoint Firewall, CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco security technologies: Firepower, ASA, WSA, ISE, Stealthwatch
Algosec, Tufin
Zscaler
Advanced Threat Detection Tools, Antibot, Antimalware, Threat Emulation
SIEM
Network Packet Analysis, Netflow
HITECH, ISO/IEC 27001, NIST Cybersecurity Framework
Splunk, Trustsec, segmentation, syslog
Incident response and disaster recovery planning and testing

Benefits

Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health, and telemedicine services
Wellbeing support including free counseling and referral services
Time away from work programs: paid time off, paid family leave, long- and short-term disability coverage, and leaves of absence
401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support, and financial wellbeing counseling
Education support including tuition assistance, student loan assistance, certification support, dependent scholarships, and a partnership with Galen College of Nursing
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection, and consumer discounts

Physical Demands / Working Conditions

Minimal supervision required based on design, service, and support knowledge/skills
May require periodic after-hours work and light travel at times with little notice
Sitting for extended periods is required

View full job page →

17d ago

Principal Security Engineer

Oracle Nashville, TN

Nashville, TN

17d ago

Full time Embedded Systems Embedded Systems Security Engineer

Apply Now

Job Description

Build stronger security foundations for cloud compute. As a Principal Hardware Security Engineer on Oracle Cloud Infrastructure, you will define and implement hardware security requirements that help ensure OCI compute hardware aligns with security posture and compliance needs. You will collaborate with Oracle teams, third-party vendors, and standards organizations to shape next-generation hardware platform security and strengthen operational security through both supply chain and operational requirements.

Onsite role in Nashville, TN with an emphasis on independent technical leadership, security validation, and cross-team execution.

Responsibilities

Define hardware security requirements that align OCI security posture with business needs and evolving technology trends
Provide independent design consulting to implement hardware security requirements within your area of expertise
Provide independent design consulting to implement features needed to achieve the security bar
Advise on security-aligned operations for provisioning, re-use, and decommissioning
Perform security assessments of compute devices to verify requirements are met
Conduct adversarial assessments to help ensure devices cannot be compromised
Assess risk from findings and threat models, and identify appropriate risk mitigation controls
Coordinate across teams to ensure requirements, findings, and recommendations are implemented
Mentor junior engineers

Requirements

Bachelor’s degree in Electrical Engineering, Computer Science, or a related field (or equivalent experience)
8-10+ years of experience in hardware security architecture, engineering, validation, planning, or a related area
Demonstrated competency in hardware and firmware with a focus on security
Competency with computer architecture
Subject matter expertise in at least one area: Root Of Trust (TCG SRTM, DRTM), x86 (Intel, AMD), ARM server platform architecture, UEFI, GPU platforms, rackscale systems, clustering, Baseboard Management Controllers, SmartNICs (DPUs), or Storage devices
Security concepts and standards related to Attestation (for example SPDM) and measurements, cryptography, Secureboot, and DICE
Ability to work with common programming languages: C, C++, Java, Python, Ruby, Go, Rust
Ability to read and review hardware schematics for security concerns
Experience using reversing tools and ability to reverse engineer

Technologies

TCG SRTM, TCG DRTM
UEFI, SPDM, Secureboot, DICE
C, C++, Java, Python, Ruby, Go, Rust
Intel SGX
SPI, I2C, RS232-style serial

Preferred Qualifications

Ability to read and understand x86 and/or ARM assembly language
Knowledge of vendor-specific TEE technologies such as Intel SGX
Familiarity with embedded communications interfaces including SPI, I2C, and RS232-style serial
Basic knowledge of enterprise and/or datacenter networking architecture
Experience operating in a large-scale DevOps or CI/CD environment
Ability to write clear and concise product security requirements
Ability to assess risk from findings and threat models and identify risk mitigation controls
Ability to succeed both independently and collaboratively with internal and external partners
Experience working effectively in a large and distributed company
Excellent organizational, verbal, and written communication skills

View full job page →

17d ago

Lead Principal Security Engineer

Oracle Nashville, TN

Nashville, TN

17d ago

Full time Cloud Platforms Engineer Hardware Attestation

Apply Now

Job Description

Lead Principal Security Engineer for Oracle OCI, focusing on consulting for hardware security to ensure compute platforms meet security requirements and strengthen operational security posture.

Responsibilities

Define hardware security requirements that align business needs and technology trends to support OCI security posture
Provide independent design consulting for complex compute systems to balance business objectives with security risks and implement requirements from the hardware security team
Advise on implementing features required to meet the security bar for complex compute systems
Consult on secure operations for compute systems, including provisioning, re-use, and decommissioning aligned with the security posture
Perform security assessments of complex compute systems to verify requirements are met
Conduct adversarial assessments to confirm systems cannot be compromised
Break down complex systems for analysis, assign parts to other team members, and collaborate to synthesize inputs into a holistic assessment contextualized to cloud environments
Review business objectives and requirements, assess risk from findings and threat models, and identify appropriate risk mitigation controls
Partner across teams to ensure requirements, findings, and recommendations are implemented inline with expected outcomes
Communicate risks and mitigation options to senior leadership while balancing security, technology, and business goals
Identify opportunities for security and process improvements and drive adoption across the organization
Contribute individual research to advance state-of-industry security knowledge
Track security subject-matter developments and educate both the business and security organizations
Mentor junior engineers

Requirements

Bachelor’s degree in Electrical Engineering, Computer Science, or related field (or equivalent experience)
10+ years of experience in hardware security architecture, engineering, validation, planning, or related work
Demonstrated competency in hardware/firmware security
Competency with computer architecture
Subject matter expertise in two or more areas:
- Root Of Trust (TCG SRTM, DRTM)
- x86 (Intel, AMD)
- ARM server platform architecture
- UEFI
- GPU platforms, rackscale systems, clustering
- Baseboard Management Controllers
- SmartNICs (DPUs)
- Storage devices
Security concepts and standards related to Attestation (example: SPDM), cryptography, Secureboot, DICE, etc.
Ability to work with common programming languages: C, C++, Java, Python, Ruby, Go, Rust
Ability to read and review complex hardware system and platform-level schematics for security concerns
Experience using reversing tools and ability to reverse engineer
Extensive research or experience with multiple classes of security bugs
Experience specifying and/or designing hardware security features

Technologies

TCG SRTM, TCG DRTM
x86, Intel, AMD
ARM server platform architecture, UEFI
GPU platforms, rackscale systems, clustering
Baseboard Management Controllers
SmartNICs (DPUs)
Storage devices
Attestation, SPDM
cryptography, Secureboot, DICE
C, C++, Java, Python, Ruby, Go, Rust
Intel SGX
SPI, I2C, RS232-style serial

Preferred Qualifications

Ability to read and understand x86 and/or ARM assembly language
Knowledge of vendor-specific TEE technologies such as Intel SGX
Familiarity with embedded communications interfaces: SPI, I2C, RS232-style serial
Knowledge of host and network virtualization technologies and how to use them securely
Knowledge of enterprise and/or datacenter networking architecture
Experience operating in a large-scale DevOps or CI/CD environment
Ability to write clear and concise product security requirements
Ability to assess risk from findings and threat models and identify proper risk mitigation controls
Ability to succeed individually or collaboratively, internally or with external organizations and individuals
Significant experience working effectively in a large and distributed company
Excellent organizational, verbal, and written communication skills
Experience conducting training, thought leadership, conference talks, and publications

View full job page →

18d ago

Penetration Tester

Deloitte Nashville, TN

Nashville, TN

18d ago

Full time Ai Security Api Penetration Testing Application Security

Apply Now

Job Description

Deloitte’s Global cyber services team is seeking a Penetration Tester to deliver practical security testing across a wide range of modern application and infrastructure surfaces. In this onsite role in Nashville, TN, you will execute penetration testing engagements and support customers with clear, actionable guidance on findings, while helping evolve testing methods through AI/LLM-enabled workflows.

Penetration testing engagements

Execute penetration testing engagements across web applications
Perform web services / API penetration testing
Conduct AI/LLM penetration testing
Carry out network penetration testing
Test mobile applications
Evaluate thick client applications through penetration testing

Consulting and methodology

Provide consultative guidance to customers on identified findings, delivered in writing and verbally in a clear and actionable format
Enhance and update testing methodologies, processes, and standards documentation
Analyze and understand complex architecture designs
Communicate the services and capabilities the group can facilitate for clients
Proactively evaluate and integrate emerging AI-assisted offensive security tooling into team methodology and playbooks

AI/LLM-assisted offensive security

Leverage AI and LLM-based tools and prompt engineering to accelerate reconnaissance and generate or refine testing scripts, using established platforms and emerging frameworks
Build, customize, and maintain AI-driven agents to automate recurring testing tasks
Continuously validate the accuracy and reliability of self-developed AI tools, working to reduce hallucinations and false positives in vulnerability identification

Required skills and experience

Experienced with Kali Linux or other dedicated penetration testing OS platforms
Knowledge of common testing tools, including Burp Professional, AMASS, Metasploit, Postman, Swagger, NMAP, Qualys, SQL Map, and others
Familiarity with OWASP Top 10 software security weaknesses and vulnerabilities
Familiarity with AI models and frameworks from providers such as Anthropic and OpenAI, and experience configuring tools like Obsidian and Ollama is a plus
Working knowledge of one scripting language and familiarity with at least one software programming language and framework
Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
Ability to manage concurrent initiatives and use judgment in prioritization and time management
Strong written and verbal communication skills
Must be a US Citizen

Preferred qualifications

Certified Ethical Hacker (CEH)
Offensive Certified Security Professional (OSCP)
Any GIAC certification (GSEC, GWAB, GPEN, GMOB, GCPN)
OWASP Application Security Top 10, OWASP API Security Top 10, OWASP Thick Client Top 10, and OWASP LLM Top 10
MITRE ATT&CK Framework
Cloud service testing
Reverse Engineering
Static Application Software Testing (SAST) and Dynamic Application Testing (DAST)
Experience with agentic development and applying it to support penetration testing

Technologies

Kali Linux
Burp Professional
AMASS
Metasploit
Postman
Swagger
NMAP
Qualys
SQL Map
OWASP Top 10
Anthropic
OpenAI
Obsidian
Ollama

View full job page →

20d ago

Penetration Tester

Deloitte Hermitage, TN

Hermitage, TN

20d ago

Full time Ai Security Application Security Cybersecurity Tools

Apply Now

Job Description

Deloitte Technology supports and protects Deloitte around the world through technology development and processes. In this onsite role in Hermitage, TN, you will deliver penetration testing services as part of Deloitte Global cyber services, combining technology and manual ingenuity to produce actionable results for customers.

This position also focuses on modern offensive security, including work across web, APIs, network, mobile, thick client, and AI/LLM penetration testing, with the opportunity to use AI and LLM-based tools to accelerate reconnaissance and improve testing workflows.

Responsibilities

Execute penetration testing engagements, including Web Application Penetration Testing
Execute penetration testing engagements, including Web Services and API Penetration Testing
Execute penetration testing engagements, including AI/LLM Penetration Testing
Execute Network Penetration Testing
Execute Mobile Application Penetration Testing
Execute Thick Client Penetration Testing
Provide consultative guidance to customers on findings in a clear and actionable format, in writing and verbally
Enhance and update testing methodologies, processes, and testing standards documentation
Leverage AI and LLM-based tools and prompt engineering using established platforms and emerging frameworks to accelerate reconnaissance and generate or refine testing scripts
Build, customize, and maintain AI-driven agents to automate recurring testing tasks
Continuously validate the accuracy and reliability of self-developed AI tools, working to reduce hallucinations and false positives in vulnerability identification
Evaluate and integrate emerging AI-assisted offensive security tooling into team methodology and playbooks
Analyze and understand complex architecture designs
Communicate the services and capabilities the group can facilitate for clients

Requirements

Experience with Kali Linux or other dedicated penetration testing OS platforms
Knowledge of common testing tools such as Burp Professional, AMASS, Metasploit, Postman, Swagger, NMAP, Qualys, SQL Map, and others
Familiarity with OWASP Top 10 software security weaknesses and vulnerabilities
Familiarity with AI models and frameworks from providers such as Anthropic and OpenAI; configuring tools like Obsidian and Ollama is a plus
Working knowledge of one scripting language and familiarity with at least one software programming language and framework
Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
Ability to manage concurrent initiatives and use effective judgment for prioritization and time management
Strong written and verbal communication skills
Must be a US Citizen

Technologies

Kali Linux
Burp Professional
AMASS
Metasploit
Postman
Swagger
NMAP
Qualys
SQL Map
OWASP Top 10
Anthropic
OpenAI
Obsidian
Ollama

Benefits

Limited immigration sponsorship may be available.

Preferred Qualifications

Certified Ethical Hacker (CEH)
Offensive Certified Security Professional (OSCP)
Any GIAC certification (GSEC, GWAB, GPEN, GMOB, GCPN)
OWASP Application Security Top 10
OWASP API Security Top 10
OWASP Thick Client Top 10
OWASP LLM Top 10
MITRE ATT&CK Framework
Cloud Service testing
Reverse Engineering
Static Application Security Testing (SAST)
Dynamic Application Testing (DAST)
Experience of agentic development and its application to support penetration testing