VAPT - Manager

Role & responsibilities

• Total 8+ years of experience in Cyber security domain
• Manages Cyber Security Assessment projects, guides the team on a day-to-day basis and ensures that assigned tasks and responsibilities are fulfilled in a timely fashion
• Demonstrates understanding of complex business and information technology management processes
• Plays a lead role in client retention, relationship building, and communication. Act as the lead for multiple client accounts in Cyber Risk Management space.
• Interacts with clients, managers and partners to build and nurture strong relationships
• Tailors firm tools and methodologies as per client requirements
• Evaluates, counsels, mentors and provides feedback on performance of others
• Manages day-to-day client relationships at appropriate management levels
• Participates in proposal development efforts to sell "add-on" work to clients
• Experience in working on multiple Cyber Security Strategy including strategy and program/process development, maturity assessment, roadmap, training and awareness programs.
• Demonstrates understanding of complex business and information technology management processes.
• Interacts with clients, managers and partners to build and nurture strong relationships.
• Tailors firm tools and methodologies as per client requirements.
• Strong experience on presales, client management and conflict management.
• Experience of Web Application Security Testing, Infrastructure VAPT, API testing, Mobile Testing (iOS & Android).
• Experience on Cloud (AWS & Azure) Configuration Review and Pentest.
• Experience in conducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Good Experience in Red Teaming, Thick Client and Source Code Review.
• Experience as an Security Architect, DevSecOPs.
• Experience on End Point Security and Product Security.
• Experience with Vulnerability Management tools: Burp, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
• Experience in basic scripting such as: Shell, Python, PERL, etc.
• Extensive experience in leveraging industry standards and frameworks such as OWASP, CIS, NIST, ISO/IEC 17799, ISO/IEC 27001, etc.

Preferred candidate profile

• Good knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.
• Strong knowledge on Threat Profiling, Container, Dockers.
• Demonstrates knowledge of one or more industry or functional area
• Demonstrates ability to develop and review technical reports and develop and deliver presentations
• Strong project management skills
• Demonstrates a general knowledge of market trends, competitor activities, firm products and service lines
• Membership and visibility in professional & civic organizations
• Candidates must possess security certification of OSCP, CRTP, eJPT, CRTA, CISM
• Good to have security certification for GPEN, CREST, CISSP.
• Bachelors or Master's degree in Cybersecurity, Information Technology, or related field.