Position: Security Analyst with Penetration Testing Expertise
Experience: 3+years
Work Mode: Remote
Notice Period: Immediate
Job Description:
We are seeking a diligent and proactive Security Analyst with specialized skills in penetration testing to join our cybersecurity team. The ideal candidate will be responsible for safeguarding our organization's computer systems and networks by identifying potential security threats, responding to security incidents, implementing effective security measures, and conducting penetration tests to proactively uncover vulnerabilities.
Key Responsibilities:
1. Monitoring and Analysis:
• Continuously monitor computer networks for security issues.
• Analyze and investigate security breaches and other cybersecurity incidents.
• Document security breaches and assess the damage caused.
2. Security Measures Implementation:
• Install and manage security measures and software, including firewalls,
anti-virus software, and data encryption programs.
• Conduct regular vulnerability assessments and penetration testing to identify and exploit system weaknesses.
• Collaborate with the IT team to fix detected vulnerabilities and ensure the highest security standards.
3. Incident Response:
• Respond to and manage cybersecurity incidents in a timely manner.
• Develop and implement incident response plans.
• Perform root cause analysis to prevent recurrence.
4. Policy and Compliance:
• Develop and enforce security policies, protocols, and best practices.
• Ensure compliance with industry standards and regulatory requirements.
• Stay current with IT security trends and news to advise on necessary updates and improvements.
5. Training and Support:
• Provide training and support to staff on cybersecurity best practices.
• Help colleagues install security software and understand information security management.
6.Penetration Testing:
• Plan and execute authorized simulated attacks on networks, applications, and systems to
identify vulnerabilities.
• Develop and implement new penetration testing methods, scripts, and tools.
• Create detailed reports on findings and recommend remediation strategies.
• Collaborate with development and IT teams to enhance security measures based on testing
results.
Requirements:
• Proven experience as a Security Analyst or similar role, with exper penetration testing.
• Strong knowledge of various cybersecurity frameworks and standards (e.g., NIST, ISO/IEC 27001).
• Proficiency with security information and event management (SIEM) tools.
• Experience with network and application security technologies.
• Expertise in penetration testing methodologies and tools (e.g., Metasploit, Burp Suite, Nmap).
• Excellent analytical and problem-solving skills.
• Strong communication skills, both written and verbal.
• Relevant certifications (e.g., CISSP, CEH, CompTIA Security+, OSCP) are a plus.
• Bachelor's degree in Computer Science, Information Technology, or a related field.
Desired Skills:
• Familiarity with cloud security, particularly in AWS, Azure, or Google Cloud environments.
• Knowledge of scripting and automation tools.
• Ability to work under pressure and handle multiple priorities.