Varutra Consulting

Assistant Manager-Attack & Pentest

Pune, MH, IN

3 months ago
Save Job

Summary

Job Description

  • Have good knowledge of IT Security and services like Application and Network Penetration Testing, Source Code Reviews, Mobile AppSec, Network VAPT, Application Threat Modeling, Network Security Architecture Review, Cloud & IOT (Internet of Things) Security Assessments, etc.
  • Cloud Security Testing: Assess the security posture of cloud infrastructure, platforms, and services (IaaS, PaaS, SaaS).
  • Evaluate cloud configuration settings for adherence to security best practices.
  • Identify potential misconfigurations, access control issues, and data leakage risks. loud Security, AWS and Azure, GCP, Oracle domain.
  • Cloud Application Pentest, (Network Pentest, Architecture Review for Infrastructure and Application, Cloud Security Configuration Review, Network Security Architecture Review and Red Teaming.
  • Hands-on technical testing beyond automated tool validation, including exploitation and leveraging of access within multiple environments, such as Windows or *nix; conduct scenario-based security testing or red teaming to identify gaps in detection and response capabilities.
  • Perform security reviews of application designs, source code, and deployments as required, covering all types of applications (web application, web services, mobile applications, thick applications, SaaS (Software as a Service).
  • Have sound knowledge about OWASP – Top Ten and WASC Threat Classifications, NIST, CIS benchmark and compliance.
  • Familiar with assessment tools such as Metasploit, Nmap, Nessus, Rapid7, Burp Suite, Acunetix, Check Marx etc.
  • Manage and coordinate with pen-testing team, coordinating with testing teams and client teams, report to management team with plans, forecasting of resources, make sure smooth operations and quality delivery.
  • Manage all phases of project, providing best quality deliverables to the client. Guide, assist and play active role in brand building, customer relations.
  • Work with security product development team to guide them and contribute as a technical advisor. Provide counseling/coaching, oversight, and support for delivery teams and staff.
  • Handle business issues/customer requirements and provide timely solutions. Mentor team(s), handle client meetings, get engaged in business meetings, work on proposals and active pre-sales.
  • Able to take the team to new heights in terms of participating in research work, motivate them for writing whitepapers, speaking into conference, etc.
  • Good understanding of business issues/customer requirements and management. Excellent Communication and Analytical skills. Highly detail oriented and strong interpersonal skills. Problem solving skills in a multi-product/service environment. Ready to adapt to a challenging and high demanding work environment.
  • Must have one certification in Information Security, Compliance & Risk Management at least.
  • Good report writing, reviewing and presentation skills
  • Displays leadership and business judgment in anticipating client/project needs and developing alternative solutions.
  • Keeps him/her self-update with latest information security updates

How strong is your resume?

Upload your resume and get feedback from our expert to help land this job