Security Engineer

AD enumeration, Kerberos attacks, lateral movement, BloodHound.

Core services, architecture patterns, security, and serverless.

AWS/GCP/Azure security: misconfigurations, IAM exploitation, posture.

Images, containers, Dockerfile, Compose, production deployment.

Buffer overflows, shellcode, ROP, post-exploitation techniques.

The version control system every software team uses.

Shell, permissions, services, networking, automation.

Static and dynamic malware analysis, memory forensics, reverse engineering.

Android/iOS pentesting, BLE, Zigbee, firmware analysis, hardware hacking.

TCP/IP, OSI, HTTP, TLS, routing — the network attack surface and defenders share.

OSINT gathering, password attacks, credential stuffing, hash cracking.

The OWASP Top 10 web application security vulnerabilities.

Pentesting methodology, reporting, IR playbooks, threat intelligence.

Linux/Windows privesc, kernel exploits, persistence.

General-purpose language for backends, data, and automation.

Hypervisor escape, container escape, sandbox techniques.

Unit testing, TDD, integration tests, and end-to-end.

SQLi, XSS, CSRF, SSRF, deserialization, advanced web vulnerabilities.