Summary: The Principal Consultant will leverage deep technical expertise to deliver high-quality VAPT services, guide team members, and collaborate with clients on security needs. Highlights: 1. Deliver high-quality VAPT services and mentor junior team members 2. Contribute to best practices and innovative solutions in VAPT domain 3. Develop and maintain testing methodologies, tools, and processes The Principal Consultant will leverage deep technical expertise and experience to deliver high Quality VAPT services, guide and mentor junior team members, and collaborate with clients to understand their security needs and challenges. The successful candidate will be a contributor in the VAPT domain, contributing to the development of best practices and innovative solutions 1\. Internal Vulnerability assessment and Penetration testing. 2\. Active Directory Assessment (both on\-premises and Azure). 3\. Cloud security 4\. Web Application Security **Key responsibilities:** * Develop and maintain testing methodologies, tools, and processes. * Perform internal technical assessments involving evading defensive technologies such as * Network Access Control, firewalls, IPS/IDS systems, SIEM, EDR, Email\-filters etc. Configure and safely utilize attack tools, tactics, and procedures against authorized OISSG * client infrastructure. * Develop scripts, tools, or methodologies to enhance OISSG's penetration testing capabilities. * Conduct tactical assessments that require expertise in security (Internal network), threat * analysis, internal and external network architecture, and a wide array of commercial and * custom products * Present findings to technical and non\-technical stakeholders, including executive * management. * Maintain comprehensive documentation of all VAPT activities and processes. **Required Qualification, Skills \& Experience:** * 5 to 8 Year of VAPT consulting experience. * OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, GXPN, CREST or Equivalent certifications. * Experience with Internal VAPT and Red teaming exercises. * Experience in active directory (both on\-premises and azure) assessments and replicating real * world attacks such as Golden SAML attack, Constraint delegation attacks etc. * Strong knowledge of Azure/AWS components like EKS, AKS, KMS, RDS, IAM, ELB, CloudFront, * security groups etc. * Experience with network OS, Windows/ Linux/ MacOS, network communications protocols, * virtual environments, cloud environments, mobile OS (Android/iOS) and containerized * platforms * Understanding of OWASP, the MITRE ATT\&CK framework and the software development * lifecycle (SDLC) Application Question(s): * Can you Join Immediately? Work Location: In person
Fatima Al-Kuwari
Indeed · HR
Fatima Al-Kuwari
Indeed · HR
