Jump to content
Nytro

Penetration Tester / Ethical Hacker - KPMG

Recommended Posts

IT Security Consultant (Penetration Tester/ Ethical Hacker)

Job profile:

  • Conducting technical security assessments and information security projects which require expertise in one or more of the following areas: Penetration Testing / Ethical Hacking, Vulnerability Assessments and IT Security Audits.
  • Identifying and exploiting technical vulnerabilities in clients’ systems, assessing the business risks of the technical vulnerabilities and communicating these to the client.
  • Performing security configuration analysis for various operating systems, especially Windows and Linux / UNIX.
  • The successful candidate will have the ability to learn quickly and work with new technologies, tools and techniques.

Some typical projects that you will work on (depending on your expertise) could be:

  • Web application penetration testing: trying to find vulnerabilities in web applications (e.g. Internet Banking, eCommerce websites, web portals, etc.) and reporting them to clients. Trying to exploit these vulnerabilities to assess their impact on the business.
  • Internal network penetration testing: simulating a malicious person who already has access to the internal network of the customer (e.g. a visitor, consultant, etc.). Starting only from a simple network port access you will have to gain access to sensitive information from the client's internal network, gain Domain Admin access or reach other flags.
  • Mobile application penetration testing: trying to find vulnerabilities in mobile applications (Android, iOS, and Windows phone) and suggesting corrective measures to improve their security.
  • You may also be involved in other types of technical project that will involve your imagination and out-of-the-box thinking, as well as giving demonstrations and presentations to clients.
  • We encourage technical research and presentation of our results to local and international hacking conferences.

Specific requirements

  • Since IT Security is a multidisciplinary field, we are looking for a person who has a broader understanding of technical concepts from one or more of the following areas: web applications, system administration, networking, software development.
  • We expect you to be familiar with OWASP Top 10, HTTP protocol, SSL, SQL, JavaScript, buffer overflow, TCP/IP, DNS, wireshark, nmap, Linux shell commands, Kali and others.
  • You must also be able to express your findings in very good technical and business English (oral and written).
  • Further requirements:

- Bachelor’s degree in an IT related field.

- Hands-on experience in at least one of the following: security testing, web application development/testing, system administration, networking, software development.

- Ability to work effectively either individually or as a member of a multi-skilled team.

- Professional discipline, accuracy, reliability and excellent analytical skills.

- Strong interpersonal skills, team spirit, resilience, flexibility, adaptability and self-motivation.

Certifications such as OSCP, OSCE, CEH, LPT, CCNA, MCSE will be considered an advantage.

Our Offer

  • A competitive salary and benefits package.
  • The chance to develop a rewarding professional path and work on challenging assignments.
  • Support for professional qualifications and personal development through a strong mentoring program.
  • Work in a friendly team of security professionals who enjoy sharing their experience with colleagues.
  • The opportunity to participate in a wide variety of technical projects and client environments.
  • Flexible working program.

Nota: Daca sunteti interesati, astept CV-ul vostru in PM.

  • Upvote 1
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...