Job Summary

Overall job function is to be the subject matter expert of vulnerability assessment and penetration testing (VAPT) service and solutions that  will cater to its clients. Able to formulate, create, present, and deploy products or solution directly to our clients. Provide professional after-salessupport firsthand and could mediate and escalate the technicalities with our vendors and distributors as needed.

Duties and Responsibilities

Primary Role:

• Conduct Vulnerability Assessments of Network and Security Devices using various open source and commercial tools
• Map out a network, discover ports and services running on the different exposed network and security device
• Conduct penetration test and launch exploits using Nessus, Metaspoilt, Kali Linux penetration testing distribution tools sets
• Research and maintain proficiency in computer network exploitation, tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding, network security, and encryption
• Analyze scan reports and suggest remediation / mitigation plan when required 
• Keep track of new vulnerabilities on various network and security devices for different vendors
• Review software posture and work with operations to plan code version upgrade requirements of supported security and network devices internally and externally to client
• Advanced technical analysis on intrusions
• Audit configuration of Network and Security devices
• Providing rich client specific reports

Secondary Role:

• Work in a team environment to resolve IT related issues with systems, network, hardware, and

software.

• Provide technical assistance and support to non-technical employees 
• Provide assistance, technical knowledge and expertise if needed in collaboration to other companies and department
• Implement and maintain IT-related procedures, policies, and restrictions.
• • Performs other information technology duties as required to support the efforts of the IT and
• Innovations department in providing IT services within Fibercom Group of Companies.

Pre-Requisites

• Experience on network vulnerability scanning penetration testing
• Experience with Nessus Tenable, Metasploit, Kali Linux or other Linux base VAPT or similar tools
• Knowledge of Network Security technology in areas of Firewall, IPS, VPN, Gateway security solutions (proxy, web filtering
• In-depth understanding on Common Vulnerability Exposure (CVE)/ Cert advisory databas
• Analytical thinker willing to “think outside the box” to resolve customer impacting situations on first contact; understand customer risk profile
• Self-starter and ability to deliver under defined timeline
• Can lead and supervise technical delivery team in implementation and deployment of projects.

• Certifications like CEH, CPTE , CISM , CISSP or any related certification for IT security
• 3-5 years in field of IT Security Services
• Network Security (multi-vendor) experience
• Broad background of networks, operating systems (Window, Unix, Linux), firewalls and security engineering concepts.
• Knowledge of IDS deployment strategies and experience in SIEM solutions (ArcSight, LogRhythm, ortiSIEM, etc..) will be advantageous
• Knowledge of scripting languages (C++, C#, Perl, CGI, HTML, Java, TCL , Shell) will be added advantage