Information Security Analyst at Cellulant Corporation

Role Summary: This is an operational role that facilitates the day to day information security tasks necessary for the functioning of the organization. Its customers range from Software Developers, Hub Engineers, Implementation Engineers, Infrastructure team and Service Management.

These information security tasks aim to enforce / maintain confidentiality, integrity and availability of Cellulant’s information by conducting offensive security assessments on Cellulant’s applications and Systems.

Duties and Responsibilities

Product Testing

• Develop security requirements and test cases during Software Development Life Cycle (SDLC).
• Perform vulnerability and penetration testing on applications
• Should have intermediate to proficient skill level in Nessus, Burpsuite, checkmarx, nikto, openvas as well as a range of scanning tools
• Testing using Kali Linux tools
• Perform code analysis for potential performance issues, usability, and/or anomalies that are related to security, privacy or risk .
• Follow up with the development teams to ensure identified security issues are addressed prior to deployment on production.
• Server and Endpoint Vulnerability Assessment
• Perform periodic vulnerability assessments on Infrastructure
• Ensure that issues identified are closed before next periodic Vulnerability assessment
• Be familiar with possible malware or ransomware attack vectors and advise blue team on weak points identified
• Update and define hardening methodologies as well as advise on patches

Network Testing

• Perform vulnerability and penetration testing on network infrastructure using tools such as NESSUS or InsightVM.
• Ensure that issues identified are closed before next periodic Vulnerability assessment

Training

• Carry out focused security trainings and maintain attendance registers. Work with GRC to ensure that weak areas are closed through periodic trainings.
• Ensure that common vulnerabilities are reduced by active trainings

Qualifications for the role

• 2+ years’ experience in Cyber Security, Red Team or Vulnerability Research
• Bachelor’s degree or, an equivalent combination of education and experience sufficient to successfully perform the key responsibilities of the job.
• Security Certifications e.g. OSCP, OSCE, OSWE, GWAPT, GPEN, GPYC, GAWN, GXPN, or CEH
• Experience with Vulnerability Management
• Experience with Threat Intelligence
• Experience with Exploit Engineering
• Experience with Security & Vulnerability Research
• Experience with Python, bash scripting and/or PowerShell
• Experience with Software Development
• Experience with Penetration Testing, physical, social engineering and/or virtual
• Experience with Cyber Security
• Advanced Knowledge in adversary tactics, techniques, and procedures

Key Relationships:

• Infrastructure team
• Security team
• Quality Assurance
• Software Engineering