We are looking for someone who is passionate about information security. Whether you like to dig into vulnerabilities and exploits, you love hacking web applications, study malware, play with metasploit or run pen-tests; we are interested in helping you develop your passion further. We are on a mission to prevent servers from being attacked against vulnerabilities and threats. You don t have to be a security expert. If you understand computers and TCP/IP networks, HTTP and other layer 7 protocols well you are more than welcome to apply for this position.
PRIMARY RESPONSIBILITIES
- Write and Test IPS, Integrity Monitoring and Log Inspection rules for quality, functionality, false positives and false negatives, regression, performance, etc
- Vulnerability/attack scenario reproduction to ensure the attack is well understood and well protected against
- Carry out testing with exploit PoCs, viruses, Metasploit and other exploit tools.
- Review for flaws in the rule and relevant codes which have a tendency of being
- Logical/state/detail oriented
- Security patch analysis
- Vulnerability and threat monitoring
- Vulnerability scanner execution & results analysis
- Develop and perform test cases based on the objectives of the test
- Script various tasks and activities by using bash, ruby, batch, perl
- Understand and interpret the detailed information on vulnerabilities and exploits in pursuance of quality testing, test cases generation and quality assurance
- Utilize common tools such as VMware suite, SQL, binary editors, terminal clients, RDP clients, browser s developers tools
- Performance testing
EXPERIENCE
- Good hands-on Security tools, vulnerability scanners, fuzzing tools, pen testing tools.
- Knowledge in TCP/IP protocols and deeper knowledge of application layer protocols like HTTP, FTP, DNS.
- Experience with signature development/testing OR penetration testing, along with writing exploit code.
- Solid understanding of Operating Systems Internals.
- Knowledge of scripting languages.
- Knowledge of Cloud Service and Container
