Vulnerability Analysis Expert (Pentest)

What tasks need to be solved:

• Conducting vulnerability analysis of the client's internal infrastructure.
• Conducting vulnerability analysis of the client's external infrastructure perimeter.
• Conducting vulnerability analysis of mobile applications.
• Assessing the security level of information systems.
• Developing scenarios for testing client employees' resilience to social engineering attacks.
• Preparing a report on the results of infrastructure vulnerability analysis.
• Developing recommendations for improving the client's infrastructure security level.

What is needed for this:

• Higher education in Information Security and/or IT.
• At least 3 years of experience as a vulnerability analysis specialist.
• Knowledge of basic methodologies for vulnerability analysis and penetration testing.
• Solid knowledge and skills in vulnerability analysis of web applications, OWASP Top-10.
• Solid knowledge and skills in vulnerability analysis of Active Directory, FreeIPA.
• Ability to work with tools for vulnerability analysis.
• Ability to work with tools for conducting phishing attacks.
• Proficiency in programming languages (Python, Go, Java, PHP, etc.).
• Knowledge of organizational and technical methods and techniques for information protection.
• Knowledge of network technologies and principles of local area network organization.
• Knowledge of English (sufficient for freely reading technical literature).
• Ability to work in a team, good communication skills, readiness and ability to achieve results within the scope of assigned tasks.
• Stress resistance and willingness to work irregular hours.

Will be an advantage:

• Possession of certificates confirming vulnerability analysis specialist skills (OSCP, OSWE, OSEP, CEH, WAPT, ADPT).
• Possession of a CISSP certificate.
• Possession of self-developed tools for vulnerability analysis.
• Ability to conduct vulnerability analysis of mobile applications.
• Experience participating in Bug Bounty programs on Russian or international platforms.
• Experience speaking at specialized conferences and meetups.