Information Security Consultant

Job Description

 Perform periodic Vulnerability Assessment related activities using industry standard tools for the Bank’s infrastructure as per Bank’s

policy

 Perform analysis of vulnerability assessment results and validation for certainty and removal of false positives.

 Perform penetration test and launch exploits using Qualys, Burp suite, Metasploit, Kali Linux penetration testing distribution tools sets.

 Demonstration of proof of concepts for exploits, manual penetration testing

 Prepare & maintain Vulnerability Tracker Sheet & Technical Risk Report on a regular basis.

 Perform security configuration review of database /servers / firewalls / switches / routers, etc.

 Knowledge of operating systems preferably windows, Linux etc. network equipment’s system & network hardening

 Research and maintain proficiency in computer application exploitation, tools, techniques, countermeasures, and trends in computer

application vulnerabilities.

 Hands on knowledge on open source and commercial security assessment tools e.g., Qualys, Nessus, Rapid7, Burp suit, Webinspect,

Nmap, Wireshark, Sqlmap etc.

Primary Skills

Experience on Vulnerability Assessment and Penetration Testing for Infrastructure, Networks, Web Application, Web Services/API,

Databases, Mobile application, etc.

Secondary Skills

Certifications in related discipline preferred (e.g., CEH, OSCP, etc.)