Back to search
ROLE OVERVIEW
A new Security Vulnerability and Penetration Testing (VAPT) Engineer is required for this legal firms growing IT division. They will be tasked with serving as a technical resource for all assessment activity related to the security posture of existing and proposed internal systems, platforms and processes. Other key aspects of this role are to protect and continually improve the confidentiality, integrity and availability of information systems per their business objectives, regulatory requirements and strategic goals.
ROLE RESPONSIBILITIES
- Perform security penetration testing of the systems, platforms and applications
- Expertise with mobile platform security technology, including vulnerability identification and exploitation tools, as well as mobile platform security best practices, frameworks, etc.
- Serve as a Subject Matter Expert for the VAPT function
- Serve as the system owner for common VAPT toolsets, platforms, and processes
- Provide technical assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based upon sound risk management principles
DESIRED SKILLS AND EXPERIENCE
- Computer Science bachelor's degree or substantially equivalent experience
- GIAC, GPEN or GWAPT required as well as CISSP and OSCP
- Strong knowledge of VAPT concepts and best practices, including the requirements for WhiteHat/ethical hacking
- Expert understanding of the difference between a vulnerability assessment and a penetration test in the context of assessment scope, objectives and deliverables
- Extensive experience with common automated VAPT tools such as Nessus, Appscan, Burp Suite, Nipper and Trustwave
- Expertise with common attack tools and frameworks such as Wireshark, Kali, Metasploit, etc.
- Understands VAPT in the context of risk management and organisational priorities
- Mastery of common application platforms and technologies to effectively understand and evaluate complex application assessments via the use of manual techniques and simple tools
Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)
