Information Security Analyst

Mindtel; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A cybersecurity firm located in the United Arab Emirates is seeking a professional to conduct penetration testing and vulnerability assessments across various platforms. This role requires strong programming skills and experience with security tools. Responsibilities include collaborating with incident response teams, providing remediation recommendations, and ensuring compliance with security regulations. Ideal candidates should be adept in security research and capable of communicating findings effectively to diverse stakeholders.

Qualifications

• Strong programming skills in languages like Python, C, or Java.
• Experience with industry-standard security tools such as Qualys, Nessus, and Nexpose.
• Ability to communicate complex findings to both technical and non-technical stakeholders.

Responsibilities

• Conduct penetration testing and red teaming on systems and networks.
• Develop custom tools/scripts for testing and exploitation.
• Participate in incident response and provide technical guidance.

Skills

Penetration testing

Vulnerability assessments

Python programming

Security tools (Nmap, Burp Suite, Metasploit)

Threat modeling

Job description

Job Summary (List Format):

• Conduct penetration testing and red teaming on systems, networks, applications and mobile platforms to identify vulnerabilities.
• Develop and use custom tools/scripts to automate testing and exploitation.
• Simulate advanced persistent threats (APTs) to assess security controls and incident response.
• Continuously discover, catalog and monitor all assets for attack surface management (ASM).
• Perform vulnerability assessments using industry-standard tools (e.g. Qualys, Nessus, Nexpose) and methodologies.
• Prioritize and provide actionable remediation recommendations for identified vulnerabilities.
• Participate in patch management activities.
• Conduct threat modeling and risk assessments to uncover and prioritize potential attack vectors.
• Collaborate with incident response teams to contain and remediate security incidents.
• Provide technical guidance and expertise during incident response and crisis management.
• Stay updated on latest security threats, trends and tools; adapt testing methodologies as needed.
• Participate in security research and develop new testing techniques/methodologies.
• Work with development teams to implement security patches and provide security guidance.
• Communicate complex technical findings to both technical and non-technical stakeholders.
• Develop and maintain detailed documentation and reports on testing results, methodologies and remediation steps.
• Maintain accurate records of all security testing and assessment activities.
• Ensure compliance with relevant security certifications and regulatory requirements.
• Demonstrate strong programming skills (e.g. Python, C, Java) and knowledge of security tools (e.g. Nmap, Burp Suite, Metasploit).
• Work independently and collaboratively in a fast-paced environment managing multiple priorities and deadlines.