Job Description

Responsibilities:

• Performing comprehensive security testing that includes the identification, reporting, and recommendations for identified vulnerabilities.
• Conducting attack surface reviews and recommending layered defences to prevent exploits, detect and intercept attacks, and discover threat agents.
• Performing complex security test data analysis in support of security vulnerability assessment processes, including root cause analysis.
• Performing security research on known and unknown vulnerabilities.
• Implementing processes, capabilities, and techniques for security testing.
• Supporting compliance and risk management activities, recommending security controls and corrective actions to mitigate vulnerability risks.

Requirements:

• Experience using security testing and analysis tools (Metasploit, Burp Suite, Kali, Wireshark, Nmap, AppCheck, Fortify).
• Experience using common vulnerability scanning tools (Nessus, Qualys, AppScan, etc).
• Experience with cloud computing and security issues related to cloud environments.
• Experience conducting security testing for cloud services (Amazon Web Services, Microsoft Azure, Google Cloud Platform).
• Demonstrated knowledge of common vulnerability frameworks (CVSS, OWASP Top 10).
• Knowledge of system, application, and database hardening techniques and practices.
• Experience with security source code review and development experience in C/C++, Java, Python.
• Basic Operating System Knowledge is required.
• API testing knowledge.

Certifications Required:Must have: CEH, OSCP or CREST.
Preferable : CISSP, GPEN, GWAPT.Job Type: Full-timeSalary: $5,500.00 - $6,000.00 per month