The Penetration Testing Engineer will conduct hands-on security assessments across various platforms, including web applications, mobile applications, web services/APIs, and networks. They will utilize both commercial and open-source tools such as Burp Professional, Nmap, Kali, and Metasploit. The engineer will be responsible for creating security threat models, test plans, and translating complex security threats into understandable procedures for developers and administrators. The role requires a strong understanding of application development processes and proficiency in at least one programming or scripting language. They should also have in-depth knowledge of current information security threats.