Job Title: T&T | Cyber : D&R | Deputy ManagerI VAPT | Chennai
Your work profile
We are looking for Security Deputy Manager in our Cyber Team. As part of your work profile, you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations: -
Key Responsibilities:
· Total 5-8 years of experience in Cyber security domain
· Experience in working on multiple Cyber Security Strategy including strategy and program/process development, maturity assessment, roadmap, training and awareness programs. Cyber security programs includes Secure Development Lifecycle, Cyber Security Strategy Maturity and Program Assessment, Vulnerability Management Lifecycle, Cyber Security Governance.
· Demonstrates understanding of complex business and information technology management processes
· Interacts with clients, managers and partners to build and nurture strong relationships
· Tailors firm tools and methodologies as per client requirements
· Experience of Web Application Security Testing, Infrastructure VAPT, API testing, Mobile Testing (iOS & Android).
· Experience on Cloud (AWS & Azure) Configuration Review and Pentest.
· Experience in conducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
· Good Experience in Red Teaming, Thick Client and Source Code Review.
· Hands on experience on DevSecOps.
· Experience as an Security Architect.
· Experience on End Point Security and Product Security.
· Experience with Vulnerability Management tools: Burp, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
· Experience in basic scripting such as: Shell, Python, PERL, etc.
· Extensive experience in leveraging industry standards and frameworks such as OWASP, CIS, NIST, ISO/IEC 17799, ISO/IEC 27001, etc.
· Good knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture
· Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
· Experience in basic scripting such as: Shell, Python, PERL, etc.
· Basic knowledge of Technoilogies such as: IPSEC, SSL, SSH, VPN, Ethernet Token Ring, WAP, SMTP, FTP, Frame Relay, WAN, ATM, FDDI, DSL, ISDN, HP Openview, Sun NetManage, Cisco Works, Radius, Big Brother, F5.
Additional Skills
• Experience on Network Security Architecture Review.
• Strong knowledge on Malware Analysis, Patch Management, Threat Profiling, Container, Dockers.
• Strong experience on presales, client management and conflict management.
• Should have large engagement execution experience
• Strong analytical and communication skills (written, verbal and presentation)
• Open to learn new tools and technologies as per the project requirement
• Interactive with team members and confident during client meetings, under the guidance of senior members of the project
• Initiative & drive
• Be deadline-oriented and quality-focused
• Familiarity with industry standards and frameworks such as OWASP, CIS, NIST ISO/IEC 17799, etc.
• Demonstrates basic knowledge of security and privacy controls and risk management processes
• Demonstrates basic knowledge in one or more Cyber Threat Management domains such as: Threat Management, Cyber Operations/Fusion Managed Services, Malware Analysis, Collective Threat Intelligence and Cyber Risk Sciences, Incident Management and Forensics, Data Protection solutions.
Desired qualifications
· B.Tech/M.Tech
· Candidates must possess security certification of OSCP, CRTP, eJPT, CRTA, CISM
· Good to have security certification for GPEN, CREST, CISSP