Experienced Cybersecurity Professional

Scope of Work Conduct vulnerability assessments on internal and/or external systems Perform penetration testing to simulate real-world attack scenarios Identify security misconfigurations, weak authentication controls, exposed services, and application vulnerabilities Evaluate network, web application, API, and system security as applicable Document findings with risk ratings, proof-of-concept details, and remediation recommendations Provide a final report summarizing vulnerabilities, business impact, and prioritized mitigation steps Deliverables: Detailed vulnerability assessment report Penetration testing findings with screenshots/evidence Risk severity classification (Critical/High/Medium/Low) Actionable remediation recommendations Executive summary suitable for management review Optional retesting after remediation (preferred) Required Skills Proven experience in penetration testing and vulnerability management Familiarity with industry standards such as OWASP, NIST, or PTES Experience with tools such as Nessus, Burp Suite, Nmap, Metasploit, OpenVAS, or similar Strong understanding of network security, web application security, and secure configurations Ability to communicate technical findings clearly Preferred Qualifications: Security certifications such as OSCP, CEH, GPEN, CISSP, or similar Previous experience working with small-to-medium business environments Experience performing authenticated and unauthenticated assessments Proposal Requirements Please include: Relevant experience and certifications Sample/redacted reports (if available) Testing methodology and tools typically used Estimated timeline and pricing Availability for follow-up discussions and remediation guidance We are looking for someone who can not only identify vulnerabilities but also provide practical recommendations to strengthen our overall security posture and reduce future risk.