Offensive Security Specialist
The ideal candidate will have the following requirements:
- Bachelor degree, preferred in Computer Science and Engineering, or comparable training with professional experience in the relevant area
- certification related to technical security (e.g. GIAC, OSCP, CEH) and willingness for continuous further qualification in relevant topics
- ability to work in large international projects related to strategic topics and transformation initiatives
- demonstrated ability to work effectively as part of a diverse and cohesive team of technically interested colleagues
- Demonstrated enthusiasm for Information Security (e.g. GitHub repo, blogs, presentations, conference talks, participation participated in free skill-building / hacking challenges)
- strong analytical and communications skills, and out-of-the box thinking with a problem-solving mind-set
- solid work experience in a global organizations
- excellent written and oral knowledge and fluence in English.
The ideal candidate has to be in possession of skills, and demonstrate solid practical hands-on experience, in most of the following areas:
- knowledge of main penetration tests methodology (e.g. OWASP) and TTP techniques (e.g. MITRE) and ability to execute vulnerability assessment activities operated with some of the main commercial and open scanning tool (e.g. Nessun, NMAP, Qualys),
- perform penetration tests on complex applications and systems, with practical experience in using exploit tools (e.g. Metasploit, BurpSuite, Kali Linux),
- proficiency in create and customize automation tools using multiple common programming / scripting languages (e.g. Python, Powershell, Bash, PERL, Ruby, PHP),
- knowledge of main networking protocols and services, including cloud oriented services.