Information Security Engineer

Roles And Responsibilities Technical Skills:

• Proficiency in various operating systems (Windows, Linux, Unix, etc.).
• Strong understanding of networking protocols and technologies.
• Knowledge of programming and scripting languages (Python, Ruby, Bash,PowerShell, etc.).
• Familiarity with cybersecurity tools such as Metasploit, Burp Suite, Nmap, Wireshark, etc.
• Ability to analyze and exploit vulnerabilities in web applications, mobile applications,

network infrastructure, and systems.

Certifications (any One Or Two)

• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• Certified Information Systems Security Professional (CISSP)
• GIAC Penetration Tester (GPEN)
• CompTIA Security+

Experience

• Hands-on experience in conducting penetration tests, vulnerability assessments, and security audits across various environments.
• Ability to identify, prioritize, and remediate security vulnerabilities.
• Experience in creating detailed reports outlining findings, recommendations, and mitigation strategies.
• Familiarity with compliance standards such as PCI DSS, HIPAA, GDPR, etc.

Soft Skills

• Strong analytical and problem-solving skills.
• Excellent communication skills, both verbal and written, to effectively convey complex technical concepts to non-technical stakeholders.
• Creativity and persistence in finding innovative ways to bypass security controls.
• Ability to work independently or as part of a team, often under pressure and with tight deadlines.

Responsibilities

• Conducting security assessments to identify vulnerabilities and weaknesses in

systems, networks, and applications.

• Performing penetration testing to exploit identified vulnerabilities and simulate real-

world cyberattacks.

• Collaborating with stakeholders to develop and implement effective security

measures and best practices.

• Providing guidance and training to other members of the organization on security-

related matters.

• Staying updated with the latest security trends, vulnerabilities, and attack

techniques through continuous learning and research.