VAPT Consultant - Qatar

Role & responsibilities

Responsible for Following activity:

1. Internal Penetration testing.

2. Red Team Assessment

3. Web application assessment.

4. Mobile application assessment.

5. Configuration review (hardening).

6. Cloud security testing.

Key responsibilities:

• Perform internal technical assessments involving evading defensive technologies such as Network Access Control, firewalls, IPS/IDS systems, SIEM, EDR, Email-filters etc
• Conduct tactical assessments that require expertise in application security (web and mobile), threat analysis, internal and external network architecture, and a wide array of commercial and custom products.
• Perform security research on topics that interest you and publishing content to contribute to the information security community.
• Configure and safely utilize attack tools, tactics, and procedures against authorized OISSG client infrastructure.
• Develop scripts, tools, or methodologies to enhance OISSG's penetration testing capabilities.
• Provide risk-appropriate and pragmatic recommendations to correct identified flaws, vulnerabilities, and misconfigurations.
• Retesting security vulnerabilities that have been fixed and republishing reports to indicate the results of retesting.

Preferred candidate profile

• 3 to 5 Year of VAPT consulting experience.
• Bachelors Degree in science/computer applications or technical qualifications like Bachelor’s Degree in Engineering/Bachelor’s Degree in Technology/MBA/or Equivalent.
• OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, GXPN or Equivalent certifications.
• Experience with network OS, Windows/ *nix/ MacOS, network communications protocols, virtual environments, cloud environments, mobile OS (Android/iOS) and containerized platforms