Advanced security certifications, such as ISC2 Certified Information Systems Security Professional (CISSP), GIAC Penetration Tester (GPEN), OffSec Certified Professional (OSCP), Hack The Box Certified Penetration Testing Specialist (CPTS), or comparable certifications. Offensive security and control validation: Conduct authorized web application and infrastructure penetration tests, red-team exercises, purple-team assessments, or technical control tests, as assigned, to evaluate defenses, document gaps, and verify remediation.