Vapt Engineer

ERM Placement Services; Kolkata District; On-site; INR 600,000 - 900,000; Full time

Job summary

ERM Placement Services is seeking a security test professional to perform web and mobile application security testing, vulnerability assessment and penetration testing. You will analyze scan reports, propose remediation plans, and work with a suite of security tools including Qualys, Burp Suite and Kali Linux.

You should have expertise in mobile app reverse engineering, OWASP Top 10 knowledge, and network security concepts. Experience with Nessus, Metasploit and OSSTMM is a plus.

Qualifications

• Experience in Web and Mobile Application Security Testing, Vulnerability Assessment and Penetration testing
• Analyze scan reports and suggest remediation / mitigation plan for security vulnerabilities
• Awareness of tools like Qualys, HP Fortify, IBM Appscan, Burpsuite, Kali Linux suite of tools
• Expertise in mobile apps reverse engineering and knowledge of Android/iOS ecosystems and tools for mobile pentest
• Understand OWASP Top 10 vulnerabilities and network security concepts (Firewall, IPS, VPN, gateway security)
• Conduct penetration tests using Nessus, Metasploit, Kali Linux distributions
• Vulnerability Assessments of Network Devices using open source and commercial tools
• Map networks, ports and services on security devices
• Research and maintain proficiency in network exploitation, tools, techniques and trends
• CVE/CERT advisory knowledge; networks, OS (Windows, Unix, Linux), firewalls and security engineering
• Scripting languages (Perl, Python, Shell) is a plus
• OSSTMM knowledge

Responsibilities

• Good interpersonal and communication skills to articulate complex issues to different audiences
• Conceptual thinking to translate business/technical requirements into models and templates
• Strong written and verbal communication and active listening
• Team player and motivated self-starter with ability to work independently
• Assertive, methodical and detail oriented

Skills

Interpersonal skills

Written communication

Oral communication

Team player

Self-starter

Attention to detail

Assertive

Methodical

Tools

Qualys

HP Fortify

IBM AppScan

Burp Suite

Kali Linux

Nessus

Metasploit

Job description

Key Responsibilities:

• Good interpersonal skills (written and oral communication) and ability to articulate complex issues Ability to communicate technical information clearly and concisely, commensurate with the audience
• Conceptual thinking and communication skills the ability to conceptualize complex business and technical requirements into comprehensible models and templates.
• Good communicator (written and verbal) and listener.
• Must be a team player and motivated self-starter with ability to work independently with limited supervision.
• Must be assertive, methodical and detail oriented

Technical Experience:

• Experience in Web and Mobile Application Security Testing, Vulnerability Assessment and Penetration testing
• Analyze scan reports and suggest remediation / mitigation plan for security vulnerabilities
• Should be aware of tools like Qualys, HP Fortify, IBM Appscan, Burpsuite, Kali Linux suite of tools
• Expertise in mobile apps reverse engineering and in-depth knowledge of Android and iOS ecosystems. Knowledge of industry standard tools for mobile pentest.
• Thorough understanding of OWASP Top 10 vulnerabilities and their mitigations. Knowledge of Network Security technology in areas of Firewall, IPS, VPN, Gateway security solutions (proxy, web filtering)
• Conduct penetration test and launch exploits using Nessus, Metaspoilt, kali linux penetration testing distribution tools sets
• Conduct Vulnerability Assessments of Network Devices using various open source and commercial tools
• Map out a network, discover ports and services running on the different exposed network and security devices
• Research and maintain proficiency in computer network exploitation, tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding, network security, and encryption.
• In-depth understanding on Common Vulnerability Exposure (CVE)/ CERT advisory database. Broad background of networks, operating systems (Window, Unix, Linux), firewalls and security engineering concepts.
• Knowledge of scripting languages (Perl, Python, Shell etc) will be added advantage
• Knowledge of Open-Source Security Testing Methodology Manual (OSSTMM)