IBM Security Consultant-Application 

India, Maharashtra, Pune 

259361584

RESPONSIBILITIES

• Perform formal and comprehensive application, infrastructure and other penetration testing assessments where appropriate and required.
• Provide well-written, concise, technical and non-technical reports in English;
• Perform vulnerability assessments and provide findings with remediation actions.
• Support with various client pre-engagement interactions, including scoping activities and proposal drafting;
• Manage and deliver penetration testing project activities within strict deadlines;
• Research application and infrastructure components within the wider team to identify new vulnerabilities and follow responsible disclosure;
• Assist in scoping calls and discussions with customers to ensure that client needs are met;
• Any other appropriate job duties in line with the associated skill and experience of the post holder.
• Conduct Network/ System Vulnerability Assessments, Penetration Testing using tools to evaluate attack vectors, identify system vulnerabilities, and provide appropriate remediation plans for mitigation of the identified vulnerabilities.

Required Technical and Professional Expertise

• Proven industry experience in application penetration testing.
• Strong understanding of OWASP, NIST and other industry penetration testing methodologies.
• Strong knowledge in testing mobile applications (iOS/Android);
• Knowledge of how modern web apps are designed, developed and deployed across different platforms.
• Strong knowledge in preparing and launching social engineering campaigns.
• Ability to program or script in your preferred language.
• Relevant security qualifications (such as OSCP, CREST CRT, TIGER);
• Good knowledge and understanding of network and OS principles.
• Good knowledge of various operating systems.
• Good knowledge of virtualisation.
• Hands On tool :-Tenable/Nessus, Qualys and Rapid7 and other OSS pen test tool(Like NMAP etc)

Preferred Technical and Professional Expertise

• Proven spoken and written communication skills with strong attention-to-detail and accuracy.
• A passion for security and networks.
• Analytical and problem-solving skills with a can-do attitude and the ability to think laterally.
• Self-motivation with a commitment to continued development.
• Ability to work independently and as part of a team.
• Influencing and negotiation skills with the ability to build relationships at all levels.
• Willingness to learn.