As a Security Engineer, you will perform authorized penetration tests on computer systems in order to expose weaknesses in their security that could be exploited by criminals. You can choose to specialize in manipulating a particular type of system, such as:
- Network and infrastructures
- Windows, Linux and Mac operating systems
- Web/Mobile applications
- APIs and Web Services, etc.
Responsibilities
As a penetration tester, you’ll understand complex computer systems and technical cyber security terms. You’ll need to do:
- Work with clients to determine their requirements from the test, for example the number and type of systems they would like testing
- Plan and create penetration methods, scripts and tests
- Carry out remote testing of a client’s network or on-site testing of their infrastructure to expose weakness in security
- Simulate security breaches to test a system’s relative security
- Create reports and recommendations from your findings, including the security issues uncovered and level of risk.
- As well as identifying problems, you may also provide advice on how to minimize risks and provide advice on methods to fix or lower security risks to systems
- Present your findings, risk and conclusions to management and other relevant parties
- Consider the impact your ‘attack’ will have on the business and its users
- Understand how the flaws that you identify could affect a business, or business function, if they’re not fixed
Salary
We are looking for Fresher to Highly Experienced candidates. Salaries offered will be based on factors including your skills, experience and qualifications, your location, and the sector you work in.
Location – India
Employee Benefits
You’ll usually receive a range of employee benefits that may include:
- Bonuses/Performance incentive
- Medical insurance
- In-office gym facility
- Sponsored training and development opportunities
Qualifications
Relevant Degree in:
- Computer science
- Computing and information systems
- Cyber security
- Forensic computing
- Network management
- Computer systems engineering
- If your degree is in an unrelated subject, in-depth knowledge of computer operating systems with demonstrable skills in compromising computer systems is required
Along with a relevant degree, if you have one or more professional qualifications would be an added advantage:
- Offensive Security Certified Professional (OSCP)
- Certified Ethical Hacker (CEH) Certification
- GIAC Penetration Tester (GPEN) Certification
- company certification schemes from major vendors and equipments providers like Microsoft (MCP, MCSE) or Cisco (CCNA Security)
Skills
You’ll need to have:
- An In depth understanding of computer systems and their operation
- Excellent spoken and written communication to explain your methods to a technical and non-technical audience
- Attention to detail, to be able to plan and execute tests while considering client requirements
- The ability to think creatively and strategically to penetrate security systems
- Good time management and organizational skills to meet client deadlines
- Ethical integrity to be trusted with a high level of confidential information
- The ability to think laterally and ‘outside the box’
- Teamwork skills, to support colleagues and share techniques
- Exceptional analytical and problem-solving skills and the persistence to apply different techniques to get the job done
- Business skills to understand the implications of any weaknesses you find
- Commitment to continuously update your technical knowledge base