Security Consultant VAPT

As a Pen Tester/ Information Security Consultant at TUV SUD, your key responsibilities include:

• Performing penetration tests on IT Systems, including applications and infrastructure, by defining test procedures, executing tests, creating test reports, and following up on reported weaknesses.
• Assessing the security status of individual applications and the infrastructure landscape.
• Developing automatic test environments and automatic tests as needed.
• Providing support to other Information Security functions such as Vulnerability Management (e.g., assessing vulnerabilities) and Incident Management (in a consulting capacity).
• Delivering various engagements for customers, contributing as an individual contributor and technical point of contact in meetings, advising on project scoping, and conducting peer reviews of consultants' output..     

The candidate should have the following qualifications and experience:

• An Engineering Degree in Computer Science/MCA or a relevant Bachelor's degree with relevant experience.
• 5-7 years of industry experience in infrastructure, web application and API pentesting.
• Conduct Configuration review using CIS benchmark      
• Knowledge of scripting language like Python 
• Prepare Threat Intelligence reports for newly discovered threat agents, exploits, attacks 
• Knowledge of penetration testing principles, tools, and techniques.
• Familiarity with system and application security threats and vulnerabilities.
• Understanding of hardware and software reverse engineering concepts.
• Proficiency in scripting languages.
• Ability to use network analysis tools, conduct vulnerability scans, and identify security vulnerabilities in IT Systems.
• Experience with penetration testing tools, exploitation tools, and assessing security system robustness and designs.
• Strong technical diagnostic skills, attention to detail, and a focus on quality.
• Excellent communication skills, both written and verbal.

Appreciated:

Relevant Information Security Certifications such as(OSCP, ECSA v10, and ECSA Practical issued within 3 years) are highly appreciated.