Ethical Hacker

•  Performs security threat/vulnerability assessments of critical industrial environments, applications, and technologies through both Ethical Hacking, Automated Web Scanning, and Source Code analysis.
•  Required to follow standard methodologies and to have an initiative for developing new and innovative processes. Including accountability for researching, designing, engineering, implementing, and supporting information security & directory technology systems (software & hardware).
•  Work within a tight team framework, the associate must be as aware as working in a tight timeline.
•  Be knowledgeable with business risks associated to common security vulnerabilities, and be able to effectively communicate security vulnerabilities to application developers and/or senior managers who may have little to no experience with application security vulnerabilities. By utilizing in-depth technical knowledge and business requirements to design & implement secure solutions to meet customer / client needs while protecting the Client’s assets
•  Develops security standards, procedures, and guidelines for multiple platforms and diverse environment (e.g. client server, distributed, mainframe, etc.)

Required Skills & Experience: 

•  Has education/experience background in computer sciences, information system from accredited college or university. Equivalent field experience are considered.
•  Experience as application security professional and having leadership skill is a plus.
• At least 3 years experience of conducting vulnerability assessments, code reviews and penetration tests.
  • To find flaws and exploits (e.g., SQL Injection, Cross-Site Scripting, Cross-Site Request Forgery, Clickjacking, Authentication/Authorization, Privilege Escalation, and Business Logic Bypass, OWASP Top 10, SANS top 25, etc.).
  •  By using testing techniques. (e.g., web application proxies, packet capture analysis software, browser extensions, advanced penetration testing Linux distributions (i.e. BackTrack/Kali), static source code analyzers, SoapUI, etc.).
• Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, HTTP/HTTPS, REST, Cookies) and programming skill (e.g. C/C++, Java, ASP.NET, PHP, AJAX or others).
• Experience and detailed technical knowledge in at least three of the following areas: general information security; security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services.

•  Strong teamwork skills.
•  Good English communication skill, written and verbal.
•  Able to learn and apply critical thinking to a variety of situations.
• Able to handle multiple projects
•  Able to work in a fast paced, challenging environment