Cyber Security

RSM US LLP; Hyderabad; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

RSM US LLP is seeking an accomplished security professional to perform comprehensive security assessments and hands-on penetration testing across web apps, networks, and systems. You will collaborate with clients across multiple technology stacks, including cloud environments, and help shape security standards and remediation strategies.

The role requires knowledge of TCP/IP, scripting languages, OS security, and security testing frameworks.

Qualifications

• Minimum B.Tech in Computer Science Engineering with technical background in computer science or cybersecurity related fields.
• In-depth knowledge of TCP/IP.
• Good knowledge of Perl, Python, Bash, or C experience.
• Operating System Configuration and Security experience (Windows, HP-UX, Linux, Solaris, AIX, etc.).
• Conceptual understanding of firewalls, switches, routers, VPNs.
• Experience with security and architecture testing and development frameworks (OWASP, OSSTMM, PTES, ISSAF, NIST SP800-115).
• Familiar with security testing techniques (threat modeling, network discovery, vulnerability scanning, etc.).
• Experience with discovering, utilizing, and possibly writing exploits for vulnerabilities.
• Open source and free tools experience (Kali Linux, Metasploit, Nmap, Wireshark, Burp Suite, Paros).

Responsibilities

• Conduct comprehensive security assessments, including static and dynamic application testing.
• Perform manual penetration testing on web apps, networks, and systems.
• Collaborate with clients across diverse technology stacks including cloud platforms.
• Develop, refine, and interpret security standards and guidance.
• Advocate for security best practices including secure development and cloud security.
• Assist in remediation recommendations for findings.
• Communicate findings clearly to senior management and clients.
• Identify improvement opportunities for assigned clients.
• Stay informed about current security trends and best practices.
• Foster collaboration within the team to achieve goals and outcomes.
• Coordinate and support other team members on projects.

Skills

TCP/IP knowledge

Perl

Python

Bash

C

Threat modeling

Vulnerability scanning

Social engineering

Network discovery

Penetration testing

Exploit development

Education

B.Tech in Computer Science Engineering

Tools

Kali Linux

Metasploit

Nmap

AirSnort

Wireshark

Burp Suite

Paros

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM.

Responsibilities

• Conduct comprehensive security assessments, incorporating both static and dynamic application security testing methods.

• Perform manual penetration testing on web applications, network devices, and other systems

• Collaborate with clients in a dynamic environment across various technology stacks and services, including cloud platforms and development technologies

• Develop, refine, and interpret security standards and guidance

• Demonstrate and advocate for security best practices, including secure development and cloud security.

• Assist in developing remediation recommendations for identified findings

• Effectively identify and communicate findings, both in writing and verbally, to senior management and clients

• Assist in identifying improvement opportunities for assigned clients.

• Stay informed about current security trends, technologies, and best practices

• Foster a collaborative environment by encouraging open communication and cooperation among team members to achieve shared goals and successful outcomes

• Assist in coordinating and supporting other team members working on assigned projects

Required Qualifications

• Minimum B.Tech in Computer Science Engineering with technical background in computer science or cybersecurity related fields

• In-depth knowledge of TCP/IP

• Good knowledge of Perl, Python, Bash, or C experience

• Operating System Configuration and Security experience (Windows, HP-UX, Linux, Solaris, AIX, etc.)

• Conceptual understanding of firewalls, switches, routers, VPNs

• Experience with security and architecture testing and development frameworks, such as the Open Web Application Security Project (OWASP), Open Source Security Testing Methodology Manual (OSSTMM), the Penetration Testing Execution Standard (PTES), Information Systems Security Assessment Framework (ISSAF), and NIST SP800-115

• Familiar with security testing techniques such as threat modeling, network discovery, port and service identification, vulnerability scanning, network sniffing, penetration testing, configuration reviews, firewall rule reviews, social engineering, wireless penetration testing, fuzzing, and password cracking and can perform these techniques from a variety of adversarial perspectives (white-, grey-, black-box)

• Experience with discovering, utilizing, and possibly writing exploits for such vulnerabilities as buffer and stack overflows

• Open source and free tools experience (Kali Linux suite, Metasploit, nmap, airsnort, Wireshark, Burp Suite, Paros, etc.)

Preferred Qualifications

• Preferred, though not mandatory, are one or more relevant certifications such as Offensive Security Web Assessor (OSWA), Offensive Security Web Expert (OSWE), Offensive Security Certified Professional (OSCP), Burp Suite Certified Practitioner, or AWS Certified Security Specialist

At RSM, we offer a competitive benefits and compensation package for all our people.We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients.Learn more about our total rewards at https://rsmus.com/careers/india.html.

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Indian Armed Forces; Indian Armed Forces Veterans, and Indian Armed Forces Personnel status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership.RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at [e-mail].