VAPT

Job Description – Vulnerability Assessment and Penetration Testing -SM
Company Name
BSE Technologies
Job Role
Vulnerability Assessment and Penetration Testing
Job Location
Mumbai
â€
The role would require a person with hands-on experience in Leading Vulnerability assessment
and Penetration testing program in Enterprise environment having host of tools and
technologies.
â€
â€
Must have experience in running Vulnerability Management and Penetration testing program.
Must Have: Experience in Tools for Firewall Evasion, Abuses to IPSec VPN, Border Gateway
Protocol, GRE Tunnelling.
•
•
•
Be able to Perform and lead an assessment or penetration test.
Must produce management dashboard for open Vulnerabilities and Risk for enterprise.
Shall be able to provide mitigating controls for open risk and exploits for the enterprise
environment.
•
•
•
Shall maintain risk register for open cyber risks in the enterprise.
Be able to lead a red team engagement and participate in a purple team engagement.
Have experience in developing exploits and tooling from vulnerabilities both pre and post
exploitation.
Job Requirements
•
Should have experience with tools Burp suite, Metasploit, Tenable, SQL Map, NMAP, SCAPY, and
other tools.
•
•
Knowledge of TCP/IP and other application and network level protocols.
Conduct vulnerability assessment and penetration testing and configuration review for systems
and networks.
•
•
•
•
•
•
Be able to author and issue reports on assigned application and system scan.
Support and recreate proofs of concept from security reports.
Good exposure to Cloud Applications like AWS, Azure and other SAAS Applications
Experience in Automating Security tasks using Python or Java Frameworks is a bonus.
Should be able to think ""Out of the box"".
Possess ability to think and implement new attack approaches/vectors.
•
Strong oral and written communication, analytical and problem-solving skills, as well as excellent
judgment on data analysis.
Skills
•
•
Proficient in Stakeholder Management and Team Leadership
Tools – Burp suite, Metasploit, Tenable, SQL Map, NMAP, SCAPY, and other tools.
•
•
Bachelor’s degree in information security, Computer Science, or a related field.
Additional certification would be an added advantage: CEH, CISA, ISO27001, ISO22301, CISSP
Education
Qualification:
•
2-4 years of proven experience as lead in VAPT and areas having hand on experience on various
tools.
Experience:
INTERNAL