Breadth of assessment

I worked on web applications, source-code review, internal and external infrastructure, Active Directory and cloud-configuration assessments, both alone and within a team. OWASP Top 10 and MITRE ATT&CK informed the testing methodology and risk assessment; I selected tests according to the environment and agreed scope.