Security Services

Location : Delhi, NCR.

Educational Background :

Bachelor's degree (or equivalent) preferred in Computer Science, Information Systems or related fields

Certifications :

Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP) and SANS GIAC.

Experience :

1 years' experience working in IT/InfoSec engineering and operations

Primary Duties: :

Excellent understanding of basic concepts such as networking, applications, and operating system functionality and be able to learn advanced concepts such as application manipulation, exploit development, and stealthy operations. Job involves reverse engineering an application and encryption method in order to gain access to sensitive data, all without being detected.

Identify and exploit misconfigurations in network infrastructure, parse various types of output data, present relevant data in a digestible manner. Expected to quickly assimilate new information of Client environments on a weekly or monthly basis on threat vectors to each environment and properly assess them.

Technical Skills Required :

• B.E / B.Tech / MBA in IT or equivalent, with 6+ years of experience in the field of IT Security and 3+ years of experience in Security Operations Center (SOC)
• Network penetration testing and manipulation of network infrastructure
• Mobile and/or web application assessments
• Email, phone, or physical social-engineering assessments
• Shell scripting or automation of simple tasks using Perl, Python, or Ruby
• Developing, extending, or modifying exploits, shellcode or exploit tools
• Developing applications in C#, ASP, .NET, ObjectiveC, Go, or Java (J2EE)
• Reverse engineering malware, data obfuscators, or ciphers
• Source code review for control flow and security flaws
• Mastery of Unix/Linux/Mac/Windows OS, including bash and Powershell
• Any of the following certifications would be preferred- OSCP / OSCE / CRTE

Key Responsibilities :

• Perform network penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social-engineering assessments
• Perform high quality web application pen tests while meeting project deadlines
• Validate security tool output, find vulnerabilities the tools can't, and create proof of concepts of various vulnerabilities to demonstrate them to stakeholders
• Research new tools and techniques to constantly improve the pen test process.
• Working with application developers to help them understand various vulnerabilities, the impact of the vulnerabilities, and high level recommendations on how to fix the vulnerability
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences
• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
• Recognize and safely utilize attacker tools, tactics, and procedures
• Develop scripts, tools, or methodologies to enhance Mendicant’s red teaming processes
• Assist with scoping prospective engagements, leading engagements from kick-off through remediation, and mentoring less experienced staff<

Other Skills :

• A skilled collaborator with experience in managing relationships through internal and external escalations along with experience in presenting to Client.
• Strong problem solving and troubleshooting skills
• Excellent Verbal and Written Communication Skills.
• Self-motivated and possessing a high sense of urgency and integrity.
• Demonstrates the ability to adapt to ever-changing schedules and work assignments including willingness to travel and work extended hours.