3-5 years of hands-on experience in cybersecurity, with a focus on penetration testing. Strong understanding of OWASP Top 10 and practical experience exploiting them in real-world applications. Experience testing REST and GraphQL APIs. Proven experience performing manual exploitation (not just tool-