Security Tester | Control Case

Owasp10; India; On-site; INR 600,000 - 3,000,000; Full time

Benefits offered by this job

Bonuses/Performance incentive

Medical insurance

Sponsored training and development

Job summary

Owasp10 in India is seeking a Security Engineer specialized in penetration testing to identify vulnerabilities in computer systems, networks, and applications. You will plan tests, create methods, carry out remote or on-site assessments, and compile reports with risk recommendations.

Fresh graduates through senior testers are welcome; salary will reflect skills, experience, location, and the sector. The role offers opportunities to grow in cyber security with ongoing training and professional

Qualifications

• Relevant degree in Computer science, Computing and information systems, Cyber security, or Forensic computing.
• If degree is in an unrelated subject, demonstrate ability to compromise computer systems.
• Professional certifications like OSCP/CEH are advantageous.

Responsibilities

• Plan and create penetration methods, scripts and tests.
• Carry out remote testing of a client’s network or on-site testing of their infrastructure.
• Simulate security breaches to test a system’s security and report findings.
• Create reports and recommendations with risk levels and remediation steps.
• Present findings and recommendations to management and stakeholders.
• Keep client requirements and deadlines in mind during testing.

Skills

Penetration testing

Security testing methodologies

Report writing

Client communication

Time management

Education

Bachelor's degree in Computer Science

Bachelor's degree in Computing and Information Systems

Bachelor's degree in Cyber Security

Bachelor's degree in Forensic Computing

OSCP

CEH Certification

MCP

MCSE

CCNA Security

Job description

As a Security Engineer, you will perform authorized penetration tests on computer systems in order to expose weaknesses in their security that could be exploited by criminals. You can choose to specialize in manipulating a particular type of system, such as:

• Network and infrastructures
• Windows, Linux and Mac operating systems
• Web/Mobile applications
• APIs and Web Services, etc.

Responsibilities

As a penetration tester, you’ll understand complex computer systems and technical cyber security terms. You’ll need to do:

• Work with clients to determine their requirements from the test, for example the number and type of systems they would like testing
• Plan and create penetration methods, scripts and tests
• Carry out remote testing of a client’s network or on-site testing of their infrastructure to expose weakness in security
• Simulate security breaches to test a system’s relative security
• Create reports and recommendations from your findings, including the security issues uncovered and level of risk.
• As well as identifying problems, you may also provide advice on how to minimize risks and provide advice on methods to fix or lower security risks to systems
• Present your findings, risk and conclusions to management and other relevant parties
• Consider the impact your ‘attack’ will have on the business and its users
• Understand how the flaws that you identify could affect a business, or business function, if they’re not fixed

We are looking for Fresher to Highly Experienced candidates. Salaries offered will be based on factors including your skills, experience and qualifications, your location, and the sector you work in.

• Fresh graduate or junior penetration testers – annual packageup to Rs.6,00,000.
• For 5 to 10 years of experienced penetration testers – annual packagebetween Rs. 10,00,000 and Rs. 30,00,000.

Location

India

Employee Benefits

You’ll usually receive a range of employee benefits that may include:

• Bonuses/Performance incentive
• Medical insurance
• Sponsored training and development opportunities

Qualifications

Relevant Degree in:

• Computer science
• Computing and information systems
• Cyber security
• Forensic computing
• If your degree is in an unrelated subject, in-depth knowledge of computer operating systems with demonstrable skills in compromising computer systems is required

Along with a relevant degree, if you have one or more professional qualifications would be an added advantage:

• Offensive Security Certified Professional (OSCP)
• Certified Ethical Hacker (CEH) Certification
• company certification schemes from major vendors and equipments providers like Microsoft (MCP, MCSE) or Cisco (CCNA Security)
• An In depth understanding of computer systems and their operation
• Excellent spoken and written communication to explain your methods to a technical and non-technical audience
• Attention to detail, to be able to plan and execute tests while considering client requirements
• The ability to think creatively and strategically to penetrate security systems
• Good time management and organizational skills to meet client deadlines
• Ethical integrity to be trusted with a high level of confidential information
• The ability to think laterally and ‘outside the box’
• Teamwork skills, to support colleagues and share techniques
• Exceptional analytical and problem-solving skills and the persistence to apply different techniques to get the job done
• Business skills to understand the implications of any weaknesses you find
• Commitment to continuously update your technical knowledge base