Open Positions
1. Penetration Tester:
Job Overview: We are seeking a skilled Penetration Tester to join our cybersecurity team. The ideal candidate will have expertise in identifying vulnerabilities and weaknesses in systems, applications, and networks through ethical hacking techniques. You will play a crucial role in strengthening the security posture of our clients by simulating real-world attacks and providing actionable remediation strategies.
Key Responsibilities:
- Conduct penetration testing on web applications, networks, and systems.
- Identify security flaws and provide recommendations for fixes.
- Simulate real-world attacks to test defenses.
- Collaborate with development and security teams to implement security controls.
- Document findings and present detailed reports to stakeholders.
- Stay updated on the latest penetration testing methodologies and attack techniques.
Qualifications:
- Proven experience in penetration testing (minimum 2 years).
- Proficiency in tools such as Burp Suite, Metasploit, Nmap, and Wireshark.
- Familiarity with OWASP Top 10 and other security frameworks.
- CEH, OSCP, or similar certifications preferred.
- Strong knowledge of networking protocols and operating systems.
- Excellent problem-solving and communication skills.
2. Security Architect:
Job Overview: We are looking for a Security Architect to design and implement security systems that protect our clients’ critical infrastructure and data. The Security Architect will lead the development of security architectures, assess current security controls, and develop strategic solutions to mitigate risks.
Key Responsibilities:
- Design, implement, and maintain security architectures for various systems and networks.
- Lead risk assessments and threat modeling for new projects.
- Evaluate current security controls and recommend improvements.
- Collaborate with internal teams to ensure the security of systems during the development lifecycle.
- Ensure compliance with industry standards and regulations.
- Provide guidance on secure configurations for hardware, software, and cloud environments.
Qualifications:
- Bachelor’s degree in Computer Science, Information Security, or related field.
- Minimum 5 years of experience in a security architecture role.
- In-depth knowledge of security frameworks (e.g., NIST, ISO 27001, CIS).
- Expertise in firewalls, intrusion detection/prevention systems, and encryption protocols.
- Strong analytical skills and ability to solve complex security issues.
- Certifications such as CISSP, CISM, or TOGAF are preferred.
3. GRC Consultant:
Job Overview: We are seeking a Governance, Risk, and Compliance (GRC) Consultant to help clients manage regulatory compliance and mitigate business risks. You will provide expert guidance on governance strategies, risk management processes, and compliance with industry standards to ensure the security and integrity of organizational data.
Key Responsibilities:
- Advise clients on GRC strategies to align with business goals.
- Conduct risk assessments and audits to identify potential risks.
- Ensure compliance with relevant regulations and standards (e.g., GDPR, ISO 27001).
- Develop and implement GRC frameworks for clients.
- Provide training and guidance to internal teams on risk management best practices.
- Collaborate with legal and compliance teams to address regulatory issues.
Qualifications:
- Bachelor’s degree in Information Security, Business, or related field.
- At least 3 years of experience in GRC roles.
- Knowledge of regulatory standards such as GDPR, HIPAA, and ISO frameworks.
- Strong understanding of risk management and compliance strategies.
- Certifications like CISA, CRISC, or CGEIT are a plus.
- Excellent communication and project management skills.