Officer, Vulnerability Assessment & Penetration Testing

Job Overview

The Officer of Vulnerability Assessment & Penetration Testing role involves actively simulating cyber-attacks to discover and exploit weaknesses in the organization's IT infrastructure, networks, and applications. This offensive security position enhances the organization's defense by evaluating the strength of current security controls and recommending improvements.

Key Responsibilities

• Carry out in-depth penetration tests on various systems, networks, and software applications to pinpoint vulnerabilities.
• Utilize both automated scanning tools and manual testing methods to exploit identified weaknesses.
• Design and implement red team exercises aimed at testing the organization's detection capabilities and response strategies.
• Employ advanced attack tactics to mimic potential cyber adversaries and evaluate security readiness.
• Conduct vulnerability assessments to detect and rank security risks according to severity.
• Analyze results from assessments and recommend practical remediation steps to enhance security posture.
• Generate detailed test reports summarizing findings, including technical details and business risk implications.
• Communicate findings effectively to both technical and non-technical audiences, providing clear guidance for necessary actions.

Required Qualifications and Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• Certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or GIAC Certified Incident Handler (GCIH) are advantageous.
• Minimum of three years’ professional experience in cybersecurity focusing on red team operations, vulnerability assessments, and penetration testing.
• Proficient in using VAPT tools including Nessus, Burp Suite, Metasploit, and OWASP ZAP.
• Strong background in Security Operations, Endpoint Management, Network Security, and Vulnerability Management.
• Deep understanding of TCP/IP networks, firewalls (Checkpoint, ASA), switches, routers, and experience with Windows and Linux operating systems as well as cloud computing and cloud security.

Behavioral Competencies

• Ability to adopt practical problem-solving approaches.
• Effective communication and information articulation skills.
• Strategic thinking and planning capabilities.
• Openness and adaptability to change.
• Curiosity in exploring new possibilities and ideas.
• Insightful and analytical mindset.
• Strong team collaboration skills.

Technical Competencies

• Data analysis and interpretation skills.
• Software debugging and issue resolution techniques.
• Knowledge of design patterns and system architecture.
• Understanding of Software Development Life Cycle methodologies and tools.
• System integration and pattern recognition expertise.
• Technical analysis and assessment aptitude.
• Experience with build and test automation processes.
• Ability to write and understand code.