IT Security – Pentester

at  Vesuvius w Polsce

REQUIREMENTS:

• Experience as a pentester or security researcher/threat hunter.
• Ideally 2+ years’ experience in a similar role.
• Excellent technical skills.
• Knowledge of vulnerability disclosure mechanism in systems in particular OWASP Top10 and CWE Top 25 Most Dangerous Software Weaknesses
• Knowledge of performing infrastructure or application pentesting
• Knowledge of security issues at a technical level
• Experience with some pentesting solutions.
• Communicative English including technical vocabulary.

Nice to have:

• Security certification from industry leaders,
• Experience working for an international organization,
• Experience with system security in OT environment
• Knowledge of Penetration Testing Standards and Guidelines eg. .
• OWASP Security Testing Guides
• PTES Technical Guidelines
• Penetration Testing Framework
• Technical Guide to Information Security Testing and Assessment (NIST 800-115)
• The Open Source Security Testing Methodology Manual
• Knowledge of reverse engineering methods

The individual will need to have the following key personal skills and attributes to perform successfully in this role:

• Excellent planning and organizational skills,
• Excellent interpersonal and communication skills,
• Excellent attention to detail,
• A proven ability to work unsupervised,
• Ability to work diligently and under pressure ,
• Ability to manage multiple workstreams simultaneously, and;
• A proactive approach and a willingness to work outside the job specification when required.

RESPONSIBILITIES:

• Performing semi-automatic pentests and manual inspections.
• Proactively searching for threats and Vulnerabilities.
• Presenting how different vulnerabilities might be exploited.
• identifying insecure IT practices and another weaknesses.
• Assessment of identified weaknesses for specific solution and possible impact on the entire environment.
• Proposing feasible solutions to mitigate weaknesses.
• Providing L2 and L3 support to other teams in security related issues.
• Performing offensive security tasks to mitigate and resolve security incidents.
• Preparing necessary documentation and reports.
• Cooperating with other team members to provide comprehensive service.

The individual will need to have the following key personal skills and attributes to perform successfully in this role:

• Excellent planning and organizational skills,
• Excellent interpersonal and communication skills,
• Excellent attention to detail,
• A proven ability to work unsupervised,
• Ability to work diligently and under pressure ,
• Ability to manage multiple workstreams simultaneously, and;
• A proactive approach and a willingness to work outside the job specification when required