Must-Have Skills
- Adversary emulation, C2, exploitation, and attack-path analysis across cloud, infra, and endpoint
- Detection and logging expertise
- BAS and MITRE ATT&CK
- Python and automation, with strong rules-of-engagement discipline
Good-to-Have
- AI coding and agentic tools (Claude Code, Codex, Copilot)
- GitLab Ultimate and AI-assisted code analysis
- Detection engineering
- AppSec (SAST, DAST, SCA)
