Description :

Title - Penetration Tester/Ethical Hacker:

Exp - 5 - 10 years

Location - Delhi

Job Description

Responsibilities:

Vulnerability Assessment: Conduct comprehensive assessments of systems, networks, and applications to identify potential security vulnerabilities.

Penetration Testing: Perform ethical hacking activities to simulate real-world cyber-attacks and discover weaknesses in the organization's defenses.

Exploit Development: Create and deploy exploits to demonstrate the impact of identified vulnerabilities and help in understanding the potential risks.

Security Audits: Conduct thorough security audits on systems, networks, and applications to ensure compliance with security policies and industry standards.

Risk Analysis: Evaluate the potential impact of identified vulnerabilities and prioritize them based on risk, likelihood of exploitation, and business impact.

Security Documentation: Prepare detailed reports on assessment findings, including recommended remediation measures and best practices for improving security.

Collaboration: Work closely with IT teams, developers, and other stakeholders to implement security measures and ensure the resolution of identified vulnerabilities.

Research and Development: Stay up-to-date with the latest security trends, vulnerabilities, and attack techniques, and actively participate in continuous learning and professional development.

Requirements:

Education: Bachelor’s degree in Computer Science, Information Technology, or a related field. Relevant certifications such as Certified Ethical Hacker (CEH) or Offensive Security Certified Professional (OSCP) are often preferred.

Experience: Proven experience in penetration testing, ethical hacking, or a related field. Familiarity with various testing tools and methodologies is essential.

Technical Skills: Proficient in using penetration testing tools such as Metasploit, Burp Suite, Nmap, Wireshark, etc. Strong understanding of operating systems, networking protocols, and application security.

Programming Knowledge: Familiarity with scripting and programming languages (e.g., Python, Ruby, PowerShell) to develop and customize tools.

Communication Skills: Excellent written and verbal communication skills to effectively convey technical information to both technical and non-technical stakeholders.

Ethical Mindset: Strong ethical standards and the ability to conduct security assessments within legal and professional boundaries.

Certifications: Industry-recognized certifications such as Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), or Certified Ethical Hacker (CEH) are often preferred.