This mid-level position requires demonstrated hands-on experience with Windows and Linux operating systems, networking, cloud environments, risk management, and secure application development practices, along with the ability to communicate security risk and recommend practical remediation approaches. Conduct testing using recognized methodologies and requirements, including the OWASP Web Security Testing Guide, OWASP ASVS when applicable, NIST SP 800-115, PTES or a comparable methodology, PCI DSS, and applicable customer or contractual requirements.