Qısa məzmun
ProSol QSC Peneteration Tester vəzifəsi üzrə vakansiya elan edir.
Müraciət üçün linkə daxil olun: https://jobs.talhunt.az/prosol/697-penetration+tester
Responsibilities:
- Perform penetration tests on computer systems, networks and applications
- Create new testing methods to identify vulnerabilities
- Perform physical security assessments of systems, servers and other network devices to identify areas that require physical protection
- Pinpoint methods and entry points that attackers may use to exploit vulnerabilities or weaknesses
- Search for weaknesses in common software, web applications and proprietary systems
- Research, evaluate, document and discuss findings with IT teams and management
- Review and provide feedback for information security fixes
- Establish improvements for existing security services, including hardware, software, policies and procedures
- Identify areas where improvement is needed in security education and awareness for users
- Be sensitive to corporate considerations when performing testing (i.e. minimize downtime and loss of employee productivity)
- Stay updated on the latest malware and security threats
Additional Qualifications:
- Experience with administering risk assessment processes based upon industry-standard, cyber risk management frameworks (i.e. NIST 4-phases: Identify, Assessment, Response, Monitor)
- Knowledgeable in ways and means for properly assessing the design and operational effectiveness of technical cyber security controls, across all domains (i.e. controls in the CIS Framework, NIST 800-53, NIST CSF, ISO 27001, or others).
- Experience with creation of aggregated data views, summary reports, and dashboards
- Experience with presenting to various levels of management
- Ability to plan and execute on scheduled cycles
- Knowledge of risk definition and risk-level determination methods
- Knowledge of cyber risks and cyber risk-mitigation strategies
- Ability to execute and think with a strong control and process mindset
- SANS, ISACA, ISO, or other related information security or audit certification is preferred (some examples: CRISC, CISA, CISSP)
What we offer:
- Health Insurance package;
- Access to the most prestigious fitness and swimming pool;
- 1 paid day off per month additional to paid vacation;
- Supporting professional development and personal growth;
Interested candidates are requested to submit their resumes through mentioned link.
Salary will be determined within interview procedure. Please note that only shortlisted candidates will be invited.