Vulnerability Assessment: Proficient in using security scanning tools (including but not limited to Burp Suite, AWVS, NMAP) to identify vulnerabilities. In-depth understanding of Web and system security flaw principles and their corresponding remediation strategies.
Web Security Expertise: Expert-level knowledge of common Web attack vectors, including SQL Injection, XSS, Command Injection, CSRF, File Upload vulnerabilities, and Parsing vulnerabilities. Solid understanding of weaknesses across various operating systems and application platforms.
OS Proficiency: Fluent in command-line operations and security configurations for Linux, Unix, and Windows environments.
Intranet Penetration: Skilled in internal network attack methodologies, lateral movement, and penetration testing within Active Directory (AD) / Domain environments.
Security Consulting: Capable of designing comprehensive penetration testing plans, executing end-to-end assessments, and providing professional vulnerability consulting and technical support.
Qualifications:
Experience: Minimum of 3 years in a cybersecurity role or involvement in large-scale information security projects.
Education: Bachelor’s degree or above in Computer Science, Cyber Security, or a related field.
Certifications (Bonus): Possession of certifications such as OSCP, OSCE, CISSP, or CRT is highly preferred.