Vulnerability Assessments Penetration testing (VAPT)

Role: Vulnerability Assessments Penetration testing (VAPT)

Location: Pune, India

Mode of work: Work from office (Daily)

Qualification:

• Bachelors degree in Computer Science, Information Technology, or a related field.
• 8 - 10 years of relevant Experience
• CEH Certified
• CREST / OSCP Certifications will be an added advantage
• MSSP (Managed Security Services Provider) experience supporting multiple customers infrastructure
• Broad background of networks, operating systems (Window, Unix, Linux), firewalls and security engineering concepts
• Knowledge of scripting languages (C++, C#, Perl, CGI, HTML, Java, TCL , Shell) will be added advantage
• Willing to travel overseas on projects

Job Description:

Infrastructure VA/PT:

• Map out a network, discover ports and services running on the different exposed network and security devices
• Conduct penetration test and launch exploits using NMap, Nessus, Metasploit, Backtrack, Kali Linux penetration testing tools sets
• Research and maintain proficiency in computer network exploitation, tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding, network security, and encryption
• Analyze scan reports and recommend remediation / mitigation actions
• Keep track of new vulnerabilities for all relevant technology platforms
• Audit configuration of OS, Network and Security devices
• Provide Cloud Infrastructure Assessments
• Providing client specific reports
• Understand IT infrastructure and traffic flows to manage VAPT exercises
• Communicate with the customer to understand their needs and address concerns.

Application VA/PT:

• Conduct Web, Mobile and Thick clients’ application assessments based on industry standards/benchmarks like OWASP
• Conduct assessments using relevant automated tools and compliment with manual reviews

Social Engineering:

• Conduct phishing and spear-phishing simulated assessments, and techniques in the social engineering domain to assess the adequacy of awareness and training programs in organizations.

Required Skills:

• Experience on Network Vulnerability Scanning and Penetration Testing
• Experience on Cloud Infrastructure Security Assessments
• Experience with Nessus Net Cat, NMAP Backtrack, Metasploit, HPing, and similar tools set like RetinaCS, Qualys
• Knowledge of Network Security technology in areas of Firewall, IPS, VPN, Gateway security solutions (DNS, VLAN, proxy, web filtering)
• In-depth understanding on Common Vulnerability Exposure (CVE)/ Cert advisory database
• Analytical thinker willing to “think out of the box” to resolve customer impacting situations on first contact; understand customer risk profile
• Knowledge in RPF preparation, Solution architecture, VAPT review and presentation in customer arena
• Strong Presentation and Documentation Skills.
• Self-starter and ability to deliver under defined timelines, team player with leadership capabilities.