Cybersecurity Consultant I Bulgaria

Cybersecurity - Bulgaria

Location: This is an in-person, full-time position based out of our Sofia office in Bulgaria

Schedule: Normal hours are Monday through Friday, 40 hours per week.

Travel: Must have the ability to travel up to 50%

We have been in the gaming industry for over 37 years but pride ourselves on looking forward. GLI is on the cutting edge of casino gaming technology and regulation, guiding clients through a dynamic, ever-changing landscape. We offer the stability of a global leader to both our clients and employees around the world.

Why You Should Work Here…

Our many talented employees are the key to our success as a market leader. In addition to competitive salaries and benefits and the opportunity to engage with team members around the globe, we consistently invest in and support employee development so that you can continue to grow and succeed as you reach your full potential.

What You Will Accomplish Here…

A career with GLI opens up new pathways to success. As a worldwide market leader, we offer stability, along with a commitment to fostering your unique talents, allowing you to grow from entry-level to an expert in the field.

What the Role Does…

The Cybersecurity Consultant conducts security assessments by probing for and exploiting security vulnerabilities in web-based applications, networks, and systems, specifically seeking out flaws and weaknesses in active systems and finding ways to ensure that any risk to our client is mitigated.

Cybersecurity Consultants simulate cyberattacks and other security breaches designed to access sensitive, private, or proprietary information. They utilize existing hacking tools and strategies and devise their own. In addition, they will generate detailed reports indicating how they managed to bypass established security protocols.

Duties and Responsibilities include, but are not limited to:

• Conducts security assessments that can be multi-faceted for a wide variety of assigned clients

• Defines the scope for security testing assignments

• Creates quality assurance security test reports and other documentation as needed

• Works with clients to develop appropriate remediation plans

• Provides clients with exceptional service in a professional, courteous and timely manner

• Provides technical support as a subject matter expert in the sale of security testing assignments on an as needed basis

• Provides thought leadership and direction for the Information Security practice on malware, attack vectors and methods to protect against threats

• Teams up with colleagues in other lines of services in support of client needs for Information Security services

• Stays up-to-date on current tools, technologies and vulnerabilities to incorporate into testing practices

• Other related duties as assigned

Requirements:

• Degree in Computer Science, Information Systems, Engineering or related major from an accredited University or College Diploma equivalent

• Experience performing vulnerability assessments and/or penetration tests would be preferred

• Application and/or infrastructure penetration testing experience above and beyond running automated tools

• A good understanding of Linux, Windows and network security skills

• Excellent written and oral communication skills in English

• Ability to meet deadlines and deliver a high-quality product (reports)

• Strong attention to detail

• Ability to work both independently and in a team environment.

Familiar with (if not qualified in) test suites such as:

• Nessus

• MetaSploit

• Burp Suite

• Kali

• NMap

• Fortify

• Acunetix

Certifications - One or more of the following certifications are considered an asset:

• EC-Council Certified Ethical Hacker (CEH)

• EC-Council Licensed Penetration Tester (LPT)

• GIAC Certified Penetration Tester (GPEN)

• IACRB Certified Penetration Tester (CPT)

• Offensive Security Certified Professional (OSCP)

• CREST Registered Tester (CRT)

• CREST Infrastructure Certification

• CESG CHECK Team Leader

• CESG CHECK Team Member

• Tiger Scheme Senior Security Tester

• Tiger Scheme Qualified Security Tester

• Any other recognized penetration testing certification/accreditation

The following skills are preferred but not required:

• PCI ASV

• CREST recognized penetration testing certification/accreditation (CREST Certified Tester (CCT) or CHECK Team Leader (CTL)

• Experience developing custom scripts or tools used for vulnerability scanning and identification

• Familiarity with threat modelling and security design review methodologies

• Support team technical development (e.g. through service development or research) and contribute to company technical processes overall

• Development and/or source code review experience in C/C++, C#, , ASP, PHP, or Java and/or Fortify, Veracode, Brakeman and/or IDA Pro

• Experience with physical security testing, phishing and social engineering techniques.

• Experience with mobile applications such as Android DeBug Bridge (ADS), OWASP ZAP, Drozer, Mobile Security Framework (MobSF), Smartphone Pentest Framework (SPF), Burp Suite, Android SDK, Friday, Cydia and/or IDB

Gaming Laboratories International (GLI) is a gaming company. Any of our employees may be required to obtain a gaming license within one or all of the gaming jurisdictions. If you are requested by GLI to obtain a gaming license, your continued employment may be contingent on your ability to obtain that gaming license.

This job description should not be interpreted as all-inclusive; it is intended to identify major responsibilities and requirements of the job. The incumbent may be requested to perform other job-related task and responsibilities than those stated above.

GLI is an Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.