About This Role
This role involves conducting and supporting mobile penetration testing on enterprise network assets, preparing reports on findings, and recommending remediation strategies. It suits a candidate with advanced security knowledge and experience in risk and vulnerability assessments.
Responsibilities
- Conduct and/or support mobile penetration testing on enterprise network assets
- Prepare reports that identify technical and procedural findings and provide recommended remediation strategies/solutions
- Perform technical (evaluation of technology) and non-technical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure and applications)
- Capture and analyze network traffic associated with malicious activities using network monitoring tools
- Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems and processes)
- Perform effective security event analysis and pattern identification
- Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity
- Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise
- Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities
- Provide technical summary of findings in accordance with established reporting procedures
- Perform timeline analysis
Requirements
- Advanced understanding of security concepts and security best practices
- Understanding and familiarity with common code review methods and standards
- Experience with performing penetration testing and risk assessments against computer networks
- Background with Qualys, Tenable and OpenVAS Vulnerability Scanners
- Problem Management skills
- Familiarity with different security and frameworks such as CIS, COBIT, ISO 17799 and 27001, NIST SP800 53, ITIL v2, HIPAA, FFIEC, NERC CIP, PCI DSS, OWASP
- Advanced Windows knowledge
- Advanced Network knowledge in Infrastructures such as VPN, LAN, WAN, wireless network, network topologies, and access methods. Hardware such as switches, routers, media types. Protocols and services such as OSI model, IPv4, IPv6, name resolutions, networking services, TCP or IP
- Security fundamentals
- Knowledge of types of threats, attack vectors
- Knowledge of network vulnerabilities and attacks
