Security Penetration Tester - Diyar United Company

A) Accountabilities:

• Provide technical vulnerability assessment and penetration testing
• Develop and manage mobile application security assessment capability
• Participate in developing Cyber Security Resilience initiatives and requirements
• Participate in developing and enhancing vulnerability assessment lab environment
• Report to Cyber Security Resilience Section Manager
• Assist in engagements with national organizations. Provide Vulnerability assessment and penetration testing with proper technical analysis and reporting
• Perform network penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social-engineering assessments.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences
• Effectively communicate findings and strategy to stakeholders
• Recognize and safely utilize attacker tools, tactics, and procedures
• Develop scripts, tools, or methodologies to enhance red teaming processes

B) Qualifications:

• Candidates should have strong background in vulnerability assessment, penetration testing of at least 3 years
• Network penetration testing and manipulation of network infrastructure
• Mobile and/or web application assessments
• Email, phone, or physical social-engineering assessments
• Shell scripting or automation of simple tasks using Perl, Python, or Ruby
• Develop, extend or modify exploits, shellcode or exploit tools
• Develop applications in C#, C++, ASP, .NET or Java (J2EE)
• Reverse engineering malware, data obfuscators, or ciphers
• Source code review for control flow and security flaws
• Desirable candidates should have up-to-date knowledge of security technologies, products, and techniques.
• Expertise in mobile application security testing, web vulnerability assessment and penetration testing
• Good knowledge in manual mobile application assessment for at least top used platforms. iOS, Android and Windows
• Proficient in multiple compiled and scripting languages (Shell, Perl, Python, Ruby, Java, C++, C#, Rust, JavaScript)
• Deep understanding in Software Development Life Cycle (SDLC)
• In-depth understanding of TCP/IP, DHCP, DNS, IPSEC, RPC, SMB, SSH, SIP, SMTP, IMAP, IRC, HTTP/S, FastFlux, Netflow, SNMP, syslog
• Technical Writing

C) Certifications:

GPEN, GXPEN, GWAPT, OSCP, OSCE, OSWE Certificates, If any available

Job Details

Preferred Candidate