Skills:- Sound knowledge of basic IT infrastructure and Linux command line (Debian / Ubuntu / RHEL / CentOS)- Understanding of:virtualization and virtual network administration (configuring and managing Ethernet/IP networks for Windows and Linux virtual machines, and configuringmanaging virtual networks for VMWare, Microsoft Hyper-V, Citrix Xenserver, Linux KVM)network protocol analysis (ARP / ICMP / TCP / UDP / HTTP / HTTPS using TCP dump or Wireshark)concepts like secure coding practice, port scanning, service scanning, enumeration and overall network security assessment- Experience with vulnerability assessment and penetration testing for network /web application/database, vulnerability management and consulting- Knowledge of widely recognized standards and industry frameworks such as OWASP, SANS, NIST etc.- Knowledge or experience of security operational activities, IT security architecture, Firewall Rules, IDS/IPS- Self-learner: ability to keep oneself updated with the latest threats and vulnerabilities discovered- Good verbal and written communication skills
Duties:- Vulnerability assessment and penetration testing of:NetworksMobile Apps (Android and iOS)Web Apps and API testingSource Code ReviewCloud Security- Robot testing- Conduct research on latest tools and technologies to derive innovative testing methodologies- Stay updated with the latest threats, vulnerabilities and security standards such as OWASP, WASC, SANS, etc.- Reporting and documentation- Deliver presentation to executive management and technical teams
