Requirement for Sr. Information Security Engineer - Penetration Testing - "Rockville, MD" (Hybrid - Expecting to work one day in office)
Purushotham
Hi,
Hope you’re doing good, We’re having a requirement for Sr. Information Security Engineer - Penetration Testing - “Rockville, MD” (Hybrid - Expecting to work one day in office). Here I’m attaching the Job description, Please share your resume if you’re in the market.
Job Title: Sr. Information Security Engineer - Penetration Testing
Location: “Rockville, MD” (Hybrid - Expecting to work one day in office)
Duration: Long Term
Job Responsibilities:
Analyze organization's cyber defines policies and configurations and evaluate risk and compliance with regulations and organizational directives.
Conduct\Support\oversee authorized penetration testing on enterprise network assets.
Prepare and review reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
Perform risk analysis, Measure effectiveness of controls against known vulnerabilities.
Work with stakeholders (system administrators and owners) to manage risks\vulnerabilities.
Perform technical (evaluation of technology) and non-technical (evaluation of people and operations) impact\risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network, and infrastructure, supporting infrastructure, and applications).
Identify systemic security issues based on the analysis of vulnerability and configuration data.
Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems, and processes).
Ensure remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.; Provide clear updates to management on vulnerabilities; Investigate, document, and report on status and emerging trends.
Maintain up-to-date vulnerability profiles, including respective detection and countermeasures.
Participate in industry task forces and working groups where appropriate to understand current and emerging vulnerabilities to stay up to date.
Job Requirements
Minimum 5 years’ experience in at least 3 of the following:
Use of vulnerability management and Penetration Testing tools.
Metasploit Pro, Core Impact, OpenVAS, Burp Suite, Nmap, Sqlmap etc.
Scripting using one or more of the following: Python, Ruby, Bash, C/C++, C#, or Java.
Establishing\improving PenTest policies, procedures, exceptions, and operations.
Leading or participating cross functional efforts for managing organization wide risks.
Collecting, analyzing, reporting, and briefing discovered vulnerabilities.
Use of industry-standards and widely accepted pen-testing and analysis principles and methods.
Must know:
• Risk management processes (e.g., methods for assessing, mitigating and accepting risks).
• Cybersecurity principles, security models, organizational requirements (w.r.t. confidentiality, integrity, availability, authentication, non-repudiation), cyber threats, risks and vulnerabilities, cryptography and cryptographic key management concepts, host/network access control mechanisms (e.g., ACLs), network access, identity, & access management (e.g., PKIs), Computer networking concepts and protocols, and network security methodologies.
• Ethical hacking principles, general attack stages; Specific operational impacts of cybersecurity lapses; programming language structures and logic.
• Basic system administration, network, and operating system hardening techniques.
Must be:
• Able to communicate, verbally and in writing, complex-technical issues with simplicity & clarity.
• Strong Interpersonal skills, excellent attention to detail and analytical skills.
• Able to exercise discretion and maintain confidentiality.
• Proficient in reporting and answering analytical questions using vulnerability data.
Education/Certifications
BA or BS degree in MIS, CS, or related cybersecurity discipline (Masters preferred).
Industry standards such as CEH, CRISC, GRCP or related GIAC (preferred but not required).
Applicants selected will be subject to a Public Trust background security investigation and may need to meet eligibility requirements for access to sensitive information.
Best Regards,
PS Reddy
Sr. Technical Recruiter
TekTree LLC.