Ethical Hacker

**Job Description: Template**

We seek a skilled and competent certified ethical hacker for our IT department at [Company A].

You will collaborate closely with our IT and security teams, providing valuable insights to enhance our cybersecurity posture. It includes educating and training employees on cybersecurity best practices to nurture a culture of heightened awareness.

**Objectives of this role**
- Conducting comprehensive vulnerability assessments, penetration testing and ethical hacking activities to strengthen the organisation's cybersecurity defences.
- Performing penetration testing to identify and exploit vulnerabilities within the company’s infrastructure.
- Collaborating with cross-functional teams to develop and implement robust security measures, policies and procedures.
- Providing technical expertise and guidance to internal stakeholders on secure coding, system hardening and cybersecurity best practices.
- Ensuring compliance with relevant industry standards, regulations and data protection laws.

**Your tasks**
- Perform detailed vulnerability analysis and exploit-known vulnerabilities to assess the resilience of our systems against real-world threats.
- Assess and analyse the effectiveness of existing security controls and propose improvements.
- Develop and execute comprehensive test plans and methodologies to simulate potential cyber-attacks and identify prone areas.
- Continuously monitor, analyse and respond to emerging security threats and trends to ensure proactive protection of our systems.
- Provide recommendations for improving security controls and implementing effective remediation strategies to address identified vulnerabilities.
- Document findings, suggestions and remediation plans in clear and concise reports.
- Provide training and awareness programs to educate employees on cybersecurity risks, safe computing practices, and incident response protocols.
- Participating in red teaming exercises to assess the effectiveness of the organisation's overall security posture.
- Contributing to the development and enhancement of cybersecurity frameworks and methodologies.
- Stay updated with the latest security technologies, tools and industry trends to enhance the effectiveness of our security posture.

**Required skills and qualifications**
- A bachelor’s degree in computer science, information systems or related fields.
- 3+ years of experience in the cybersecurity or related field, with a preference for certified ethical hacker roles.
- Certified Ethical Hacker (CEH) certification or equivalent.
- Familiarity with common vulnerabilities and exploits and their prevention and mitigation strategies.
- Proficiency in using a variety of security assessment and penetration testing tools.
- Knowledge of programming languages, operating systems, and network protocols, including Linux and Windows and security frameworks like NIST.
- Competent with encryption, cryptography, malware analysis, cloud technologies and security.
- Good understanding of network security principles, including firewalls, IDS/IPS and VPNs.
- Proficiency in using scripting languages such as Python, Ruby, or PowerShell.
- Ability to effectively communicate complex technical concepts to both technical and non-technical stakeholders.
- Excellent problem-solving and analytical skills to identify and address security vulnerabilities.
- Strong communication and interpersonal skills to effectively convey complex security concepts to technical and non-technical stakeholders.
- High ethical standards and the ability to adhere to strict confidentiality guidelines.

**Preferred skills and qualifications**
- Certified Information Systems Security Professional (CISSP) certification or other relevant certifications.
- Knowledge of regulatory requirements such as GDPR, HIPAA, or ISO 27001.
- Efficient in writing scripts and programs in varied languages.
- Aptitude to analyse and interpret security logs and events.
- Experience in conducting security assessments, penetration testing in diverse environments, incident response and handling security incidents.
- Familiarity with cloud security testing concepts and technologies.
- Strong understanding of cryptography and cryptographic protocols.
- Continual learning mindset and a passion for staying updated on the latest advancements in cybersecurity.

Pay: ₹55,000.00 - ₹75,000.00 per month

Schedule:

- Day shift

**Experience**:

- total work: 6 years (preferred)

Work Location: In person