Information Security Analyst
Key Responsibilities:
Penetration Testing and Red Teaming:
- Conduct comprehensive penetration
testing and red teaming exercises on systems, networks, applications and
mobile to identify vulnerabilities and potential entry points for
attackers.
- Develop and execute custom tools
and scripts to automate testing and exploitation processes.
- Analyze and report on findings,
providing detailed explanations of vulnerabilities and recommended
remediation steps.
- Simulate advanced persistent
threats (APTs) to test the resilience of security controls and incident
response capabilities.
- ASM: Continuously discover and
catalog all assets, including hardware, software, and network components.
- ASM: Monitor the attack surface
for changes and potential vulnerabilities, using automated tools and
manual assessments.
Threat Modeling and Risk Assessment:
- Conduct threat modeling and
risk assessments to identify potential attack vectors and vulnerabilities
- Develop and maintain a
comprehensive understanding of our systems, networks, and applications to
identify potential vulnerabilities
- Provide recommendations for
remediation and mitigation strategies
Incident Response and Crisis Management: - Participate in security
incident response and crisis management efforts as needed
- Collaborate with incident
response teams to contain and remediate security incidents
- Provide technical expertise and
guidance during incident response efforts
- Security Research and Development:
- Stay up-to-date with the latest
security threats and trends, and adapt testing methodologies accordingly
- Develop and maintain a
comprehensive knowledge of industry-leading security tools and
technologies
- Participate in security
research and development efforts to identify and develop new testing
techniques and methodologies