Senior Consultant, Web Application Pen Testing at Google in Denmark

Participate in the external phases of larger Red Team assessments, leveraging web application compromise to establish initial footholds. Conduct in-depth, manual pen testing of web applications, APIs, microservices, and mobile backends, focusing on complex business logic vulnerabilities and novel attack vectors. Conduct network and infrastructure pen testing as part of broader client assessments. Dedicate time to security research, finding new exploitation techniques, discovering 0-days, developing custom tools, and contributing back to the security community. Author comprehensive, accurate, and highly technical reports detailing precise exploitation steps, proof-of-concepts, and remediation advice for developers and C-level stakeholders. Act as a technical lead on engagements, helping to scope projects, guide delivery, and mentor junior consultants in advanced application security testing techniques.