Job Description

Position: Infrastructure Security consultant (USA/CANADA)

Location: 100 % REMOTE

Special note : This Position Might Reach its maximum submittal limit Within 1-2 Hour, So Please Share Profile As soon as possible.

Job Description:

***The Interview process w/ include a "LAB" - the will be asked to work the exercises in the lab, generate a report reflecting their experience, then present the report to our team as if we're a client.***

Overview:

The Cybersecurity Specialist {penetration tester} will conduct internal/external testing on network infrastructure, mobile applications, or web applications for corporate clients, actively evaluating the client's information security measures. The pen tester will conduct non-invasive analyses of externally-facing IPs and URLs to determine the potential risk of unauthorized access or if other malicious activity is possible. In addition, the Cybersecurity Specialist will have responsibility for evaluating our clients' susceptibility to social engineering. Any usage of Plextrak product or skills/background is highly desirable

Requirements :

1. Must have 5+ years experience in information security with web application, network penetration testing, manipulation of network infrastructure, Mobile and/or web application assessments, Email, phone, or physical social-engineering assessments experience performing manual investigative tests including the following skills :
2. Exploit security flaws and vulnerabilities with attack simulations on multiple projects working against specific client focused scopes of work :

• Perform phishing schemes /or Social engineering exploitations
• Perform firewall assurance reviews utilizing commercial tools
• Developing, extending, or modifying exploits, shellcode or exploit tools
• Conducting Shell scripting or automation of simple tasks using Perl, Python, or Ruby
• Perform, review and analyze security vulnerability data to identify applicability and false positives
• Previous experience with network intrusion detection, extrusion detection and network analysis tools such as:
• PREFERRED SOFTWARE: Nessus. Cobalt Strike. BurpSuite.
• OTHER SOFTWARE: FireEye, Nessus, Metasploit, nmap, BurpSuite,Proxy, Nikto and/or BackTrack

1. Experience with detecting and assessing threats such as network and upper laver vulnerabilities with the ability to coordinate and facilitate containment and remediation efforts. Solid understanding of Networking and Operating Systems.
2. Familiarity with cryptographic principals, and common encryption schemes such as symmetric/asymmetric encryption, hashing, SSL/TLS, IPSec, PGP, S/MIME, SSH, PKI.
3. Demonstrated understanding of computer networking, operating systems, IDS/IPS, firewalls, OWASP and network security solutions
4. Must have previous experience creating/producing written reports as this is the primary deliverable at the end of a client engagement. The creation of professional, comprehensive written materials & conduct management briefings
5. Security or testing certification a plus (e.g. CISSP, OSCE, OSCP, C|EH, GXPN, GREM, GPEN, GWAPT, GAWN, GCIH, GCFA, GMOB, GCIA, GSEC
6. Must have independent project and time management skills. --Must be comfortable with and successful in meeting deadlines in a dynamic, evolving environment.
7. Effectively communicate in written and oral form with team members and clients.

Job Tags

Similar Jobs