Vulnerabilty Assessment & Penetration Testing

Job Description

We have an urgent opportunity for Vulnerabilty Assessment & Penetration Testing Position with a leading provider of consulting, risk management and technology solutions headquartered at Norwalk, CT (US) based @ NoidaCANDIDATES MUST BE WILLING TO RELOCATE TO NOIDA POST COVIDCANDIDATES WHO CAN JOIN IMMEDIATELY / 15 days MAX - MAY ONLY APPLYBelow are Job detailsExperience 3 to 6 years of experience

• Develop and document standard methodologies for vulnerability and compliance management solutions.
• System vulnerability assessments and remediation, including the assessment/deployment of vendor security updates.
• Depending on the final rating, actively manage the work effort to implement the remediation.
• Security incident response in coordination with other teams across the company and/or externally as required.
• Design and develop tools to automate operations or reporting tasks.
• Stay ahead of evolving cyber threats and vulnerabilities, as well as recent breaches and the charge vectors.
• Work well with customers to bring together requirements and ensure implementation of vulnerability and compliance management solutions.
• Responsible for configuration of current enterprise security log source types into the SIEM.
• Analyses and identifies areas of improvement with existing processes, procedures and documentation.
• Demonstrates how to use vulnerability and compliance management solutions products to both technical/non-technical personnel.
• Provide remote consulting services via interactive client sessions to assist with implementation of multiple product vendors and technologies.
• Contributor works closely with Senior Engineers in supporting existing systems and initiatives.
• Use ITIL Service Request, Incident, Risk, Problem, and Change Management principles to optimize and reduce risks within IT systems, particularly as it relates to security.
• Design and configure system management tools to provide monitoring and management of vulnerability and compliance management solutions.
• Operate a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired and wireless networks, and mobile applications/devices.
• Develop and maintain security testing plans.
• Automate penetration and other security testing on networks, systems and applications.
• Develop meaningful metrics to reflect the true posture of the environment allowing the organization to make educated decisions based on risk
• Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation and tracked to closure
• Communicate security issues to a wide variety of internal and external customers to include technical teams, executives, risk groups, vendors

• College degree or equivalent training with experience working in the Cyber Security field
• 3+ years professional experience maintaining Vulnerability scanning tools, patch management tools like SCCM or equivalent.
• 2-3 years professional experience working with vulnerability and compliance management and patch management process.
• 1-3 years of experience in handling patch management process, good knowledge on mitigation process.
• Knowledge of web application scanning using vulnerability scanning tools and manual testing.
• Information security knowledge in one or more areas such as Enterprise security products
• Understanding of network architecture and implementation is a requirement; will have worked with network security analysis
• Experience with Security dashboard creation and reporting.
• Knowledgeable of Linux and Windows Operating systems (Windows, Linux &
• MAC OS knowledge required)
• Basic experience with ITIL processes such as
• Incident/Problem/Configuration/Change management.
• Good customer handling skills along with extensive hands on skills in defining and creating operational/procedure documents
• In-depth technical knowledge of vulnerabilities associated with current network,
• Operating systems and security hardware, software, protocols and Internet standards
• Knowledge applying security principles as it relates to IT Governance, Risk, and Compliance
• Basic understanding of SANS Critical Security Controls (CSC), CVE files and zero day attacks.
• Basic to Moderate knowledge of penetration techniques
• Knowledge of zero-day vulnerabilities/attacks

Keyskills :
penetration testingchange managementmac ossecurity controlsvulnerability managemententerprise securitynetwork securityrisk managementpatch managementsecurity testingcyber security