Cyber Security Consultant / Penetration Tester
类别：技术位置：寻找一个强烈的结果导向和能够分析实现的人。你的主要活动将集中在网络，基础设施和应用程序文件中的安全分析上。你的责任将是：·为我们的客户积极执行侵入测试：内部/外部侵入测试，应用程序和 Web 应用程序测试；·对基于 Web 的应用程序，移动应用程序，网络和其他计算机系统进行安全测试；·从逻辑，理论和技术角度进行安全审计；· 调查客户软件和硬件堆中已知的漏洞；· 尽管需要执行预先确定的测试类型，但你还将设计自己的测试脚本；· 填写发现情况评估报告并将其转化为客户的全面报告。要求·作为网络安全专业人员，你具有对当前最佳实践以及非现象思维所需的知识。· 对 ICT 系统，网络和安全技术的良好知识：操作系统安全，网页和移动应用程序安全。· 经验证明的 IT 安全和透测试。· 认证通过通透测试 （OSCP,OSCE,GIAC,GXPN,GPEN 或等级）. · 善良的 （技术）写作和演示技能 （意大利语，英语）. ·对网络概念和架构的良好理解。· 熟练了解常见的测工具。· 善于了解 OSSTM,OWASP,NIST 等常规安全方法。· 最少4年的 IT 安全经验，最好是应用安全测试经验。·能够独立工作并提供质量结果。· 企业解决方案中的安全知识 (SAP HANA,ERP,SRM,CRM) 是一个优势。·你在刺激学习环境中得到一个动态的团队；·你被邀请参加许多知识分享活动，并受到激励组织自己的活动；·你与不同背景的高级和初级人员合作，这将帮助你从最好的那里学习，成为更全面的顾问；·请书籍，我们会获得它；·团队建设旅行。详情原始地发布于喜马拉雅山
查看英文原文
Category: Tecnologia
Location:
Looking for a smart person who is strongly result oriented and able to achieve it analytically.
Your main activities will be oriented on security analysis in the filed of networking, infrastructure and application.
Your responsibilities will be:
- Actively perform intrusion tests for our clients: internal / external intrusion tests, application and web application tests;
- Conduct security tests on web-based applications, mobile apps, networks, and other types of computer systems;
- Perform security reviews of application designs, source code, covering all types of applications;
- Conduct security audits from both a logical, theoretical and technical standpoint;
- Researching known vulnerabilities within our clients software and hardware stacks;
- Although it is necessary to run pre-determined types of tests, you will also be designing your own test scripts;
- Fill out assessment reports on what was discovered and translate this into a comprehensive report for the customer.
Requirements
- As a cybersecurity professional you have the necessary knowledge of current best practices combined with out-of-the-box thinking.
- Good knowledge of ICT systems, networks and security technologies: Operating system security, web and mobile application security.
- Proven experience in IT Security and Penetration Testing.
- Certifications in penetration testing (OSCP, OSCE, GIAC, GXPN, GPEN or equivalents).
- Good (technical) writing and presentation skills (Italian, English).
- Good understanding of network concepts and architecture.
- Advanced knowledge of common pentesting tools.
- Good knowledge of common security methodologies, such as OSSTM, OWASP, NIST.
- Minimum 4 years of experience in IT security and preferably experience with application security testing.
- Able to work independently and to deliver qualitative results.
- A knowledge of security in Enterprise solutions (SAP HANA, ERP, SRM, CRM) is a plus.
Benefits
- You get a dynamic team in a stimulating learning environment;
- You are invited to a lot of knowledge-sharing events and stimulated to organize your own;
- You work with Senior and Junior people with different backgrounds that will help you to learn from the best and become a better-rounded consultant;
- Ask for a book, we'll get it;
- Team building travel.
DetailsOriginally posted on Himalayas