JOB SUMMARY
We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.
You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems.
Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.
Hands on Responsibilities
Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline
Develop the security acceptance test plan
Provide expert technical support during the security testing activities
Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools
Perform manual or automated security testing using commercial security testing tools
Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests on network
Conduct Whitebox Testing and
Secure Code Review
Conduct
Network
and
Infrastructure
Vulnerability Assessment and
Penetration Testing
Conduct
Web ,
Mobile
and
Desktop Application
Vulnerability Assessment and
Penetration Testing
Find and pinpoint the vulnerabilities of the assess target system / application
Document and Report the vulnerabilities found in the system
Provide professional recommendations / advice to mitigate and resolve the vulnerabilities
Present the security testing results to the relevant stakeholders
Provide weekly status reporting on the security testing activity progress
Requirements
Bachelor's degree, preferably in computer science or information systems, or equivalent work experience
Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role
Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing
Required Certifications: Any of the followings:
CREST Registered Penetration Tester (CREST CRT)
CREST Practitioner Security Analyst
Offensive Security Certified Professional (OSCP)
Knowledge in conducting security testing with the following guidelines and standards
Experience in configering and setting of Sona Cube offline.
High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)
Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)
Experience/Knowledge in Semgreb will be advantage
#J-18808-Ljbffr