Verified Job
IT / Software / Data Analyst
Red Team Sr. Analyst- job post CODEC Networks
IT / Software / Data Analyst
#795301
Remote / WFH
CODEC Networks
Job Description
Full job description
Location : Delhi, NCR.
Educational Background :
Bachelor's degree (or equivalent) preferred in Computer Science, Information Systems or related fields
Certifications :
Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP) and SANS GIAC.
Experience :
1 years' experience working in IT/InfoSec engineering and operations
Primary Duties: :
Excellent understanding of basic concepts such as networking, applications, and operating system functionality and be able to learn advanced concepts such as application manipulation, exploit development, and stealthy operations. Job involves reverse engineering an application and encryption method in order to gain access to sensitive data, all without being detected.
Identify and exploit misconfigurations in network infrastructure, parse various types of output data, present relevant data in a digestible manner. Expected to quickly assimilate new information of Client environments on a weekly or monthly basis on threat vectors to each environment and properly assess them.
Technical Skills Required :
B.E / B.Tech / MBA in IT or equivalent, with 6+ years of experience in the field of IT Security and 3+ years of experience in Security Operations Center (SOC)
Network penetration testing and manipulation of network infrastructure
Mobile and/or web application assessments
Email, phone, or physical social-engineering assessments
Shell scripting or automation of simple tasks using Perl, Python, or Ruby
Developing, extending, or modifying exploits, shellcode or exploit tools
Developing applications in C#, ASP, .NET, ObjectiveC, Go, or Java (J2EE)
Reverse engineering malware, data obfuscators, or ciphers
Source code review for control flow and security flaws
Mastery of Unix/Linux/Mac/Windows OS, including bash and Powershell
Any of the following certifications would be preferred- OSCP / OSCE / CRTE
Key Responsibilities :
Perform network penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social-engineering assessments
Perform high quality web application pen tests while meeting project deadlines
Validate security tool output, find vulnerabilities the tools can't, and create proof of concepts of various vulnerabilities to demonstrate them to stakeholders
Research new tools and techniques to constantly improve the pen test process.
Working with application developers to help them understand various vulnerabilities, the impact of the vulnerabilities, and high level recommendations on how to fix the vulnerability
Develop comprehensive and accurate reports and presentations for both technical and executive audiences
Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
Recognize and safely utilize attacker tools, tactics, and procedures
Develop scripts, tools, or methodologies to enhance Mendicant’s red teaming processes
Assist with scoping prospective engagements, leading engagements from kick-off through remediation, and mentoring less experienced staff<
Other Skills :
Location : Delhi, NCR.
Educational Background :
Bachelor's degree (or equivalent) preferred in Computer Science, Information Systems or related fields
Certifications :
Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP) and SANS GIAC.
Experience :
1 years' experience working in IT/InfoSec engineering and operations
Primary Duties: :
Excellent understanding of basic concepts such as networking, applications, and operating system functionality and be able to learn advanced concepts such as application manipulation, exploit development, and stealthy operations. Job involves reverse engineering an application and encryption method in order to gain access to sensitive data, all without being detected.
Identify and exploit misconfigurations in network infrastructure, parse various types of output data, present relevant data in a digestible manner. Expected to quickly assimilate new information of Client environments on a weekly or monthly basis on threat vectors to each environment and properly assess them.
Technical Skills Required :
B.E / B.Tech / MBA in IT or equivalent, with 6+ years of experience in the field of IT Security and 3+ years of experience in Security Operations Center (SOC)
Network penetration testing and manipulation of network infrastructure
Mobile and/or web application assessments
Email, phone, or physical social-engineering assessments
Shell scripting or automation of simple tasks using Perl, Python, or Ruby
Developing, extending, or modifying exploits, shellcode or exploit tools
Developing applications in C#, ASP, .NET, ObjectiveC, Go, or Java (J2EE)
Reverse engineering malware, data obfuscators, or ciphers
Source code review for control flow and security flaws
Mastery of Unix/Linux/Mac/Windows OS, including bash and Powershell
Any of the following certifications would be preferred- OSCP / OSCE / CRTE
Key Responsibilities :
Perform network penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social-engineering assessments
Perform high quality web application pen tests while meeting project deadlines
Validate security tool output, find vulnerabilities the tools can't, and create proof of concepts of various vulnerabilities to demonstrate them to stakeholders
Research new tools and techniques to constantly improve the pen test process.
Working with application developers to help them understand various vulnerabilities, the impact of the vulnerabilities, and high level recommendations on how to fix the vulnerability
Develop comprehensive and accurate reports and presentations for both technical and executive audiences
Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
Recognize and safely utilize attacker tools, tactics, and procedures
Develop scripts, tools, or methodologies to enhance Mendicant’s red teaming processes
Assist with scoping prospective engagements, leading engagements from kick-off through remediation, and mentoring less experienced staff<
Other Skills :
