Vacancy expired!
- Deliver penetration testing and other related security activities for medium to enterprise level clients, for example OT Systems(Generation Control Systems, SCADA, Distribution Control Systems, etc), Web Application Penetration testing, Mobile Application Penetration testing, Infrastructure and Network Penetration testing, Wireless Penetration testing, and Social Engineering. These security activities will include performing engagement kick off calls, email responses and debrief for each assigned client engagement.
- Write full and thorough reports for each engagement that show rapid and constant improvement, incorporating feedback from quality reviews.
- When requested, provide technical analysis of current OT/IT Security related events.
- Be a continuous learner, keeping up to date on a wide variety of IT Security related skills and industry knowledge.
- A Bachelor’s degree (or equivalent) in a technical discipline.
- A total of 10+ years of cyber security experience
- At least 6+ years of experience in penetration testing of enterprise IT applications and a minimum of 3 years’ experience of performing penetration testing of OT systems at an Energy and Utility or Oil and Gas company.
- Knowledge of OT systems and respective architectures(62443, perdue)
- Knowledge of common application-level vulnerabilities including those found in the OWASP Top 10 and CWE Top 25.
- Hands-on expertise with commercial and open-source penetration testing tools (ex: Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, CANVAS, SQLMap, Empire, etc.).
- Understanding of Linux/Windows-based operating systems
- Programming skills in Python, Powershell, Ruby, or other relevant languages.
- Knowledge of common penetration testing methodology and standards (PTES, OWASP, CREST, OSSTMM, CWE, CAPEC, CVE, CVSS, etc.)
- GIAC Certified Penetration Tester (GPEN)
- GIAC Web Application Penetration Tester (GWAPT)
- Offensive Security Certified Professional (OSCP)
- Offensive Security Certified Expert (OSCE)
- Certified Secure Software Lifecycle Professional (CSSLP)
- Certified Security Analyst (ECSA)
- CREST Registered Tester or CREST Certified Tester.
Vacancy expired!