01Responsibilities
Be a part of a team of cybersecurity consultants and analysts.
Monitor project progress, and ensure timely delivery of engagements.
Work on penetration testing reports and technical deliverables to maintain quality standards.
Work with team members through technical reviews, knowledge-sharing sessions, and hands-on mentoring
Focus on Cyber Security Assessment projects covering either vulnerability assessment & penetration testing, network security architecture review, secure configuration/code review, firewall ruleset reviews
Experience with Vulnerability Management tools: Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify, etc.
Manage day-to-day client relationships at mid and lower levels.
Good knowledge of TCP/ IP and Networks, including Firewalls, IDS/IPS, Routers, Switches, and network architecture.
Experience in Infrastructure Penetration Testing and Application Security Testing.
Demonstrates ability to work independently on projects with limited supervision and lead a small team with assistance from Manager.
Key Technical Skills:
Hands-on experience performing Network, Web, API, Mobile, and Thick Client application security testing.
Proficient in using manual and automated application and network security tools such as Burp Suite, OWASP ZAP, Acunetix, ffuf, wfuzz, nikto, Nmap, and Nessus.
Experience in Secure Code Review.
Experience conducting Network Security Architecture Reviews and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
Experience in basic scripting such as Shell, Python, PERL, etc.
Strong analytical and communication skills (written, verbal, and presentation
Open to learning new tools and technologies as per the project requirement
Interactive with team members and confident during client meetings under the guidance of senior members of the project
Be deadline-oriented and quality-focused
Certification: OSCP, OSCE, GPEN, CEH etc
Familiarity with industry standards and frameworks such as OWASP, CIS, and ISO27001
Basic Knowledge of programming languages like C/C++, C#, JAVA, and ASP.NET, and familiarity with PERL/Python Scripting.
Basic Knowledge of the cloud environment and its various components.
Familiar with OWASP and Secure SDLC standards.
offensive security skill sets include backdoors, keyloggers, password dumpers, and spear phishing payloads.
Deliver Red Team Exercises and augment Senior Red Teamers.
Knowledge of standard security requirements within ASP.NET applications
Good Knowledge of TCP/IP, Network Security.
Ability to automate certain security test cases or write PoC using a scripting language (Python, Shell Script, Ruby/Perl, etc.) wherever required. .
