pentesting Distros: Kali Linux 2018.3, Santoku, Linux Blackarch, Wifislax, Parrot OS.
Cybersecurity tools: Metasploit, Armitage, Burp Suite, Vega, Maltego, Faraday, SqlMap, BbqSQL, nmap and Sparta among others.
IAM (Identity management): CA IDM, CA SiteMinder, Avatiar, Oracle Identity OID, Oracle Virtual Directory OVD, AD Domain Controller, Azure AD.
Endpoint Cyber Security and SIEM: ELK, McAffee AV, Gemalto, Secure File Storage, Splunk SEC, FireEye, FTI-J (file tokenization utility) / Liaison-Protect, Symantec MSS.
Cyber security frameworks and compliance. PCI DSS, HIPAA, ISO 27001 /27002 , CIS, NIST, COBIT, SOX, GDPR
Network: Vormetric, FTIJ (File Tokenization Utility) Tripwire (File Integrity Monitoring), McAfee AV, ELK, Tokenization (NETS Service).
Languages. Java, Python, Perl, C++, HTML 5, JS, CSS, XML, PHP, MATLAB, R.
Bl Tools: Confidential cognos Bl, Targit Bl, Necto, Information Builders Bl tools.
Databases: crystal reports, oracle RDBMS (6.x - 1 20, MySQL (3.23 - 5..6), MS SQL server 2018, NoSQL, MariaDB, PostgreSQL, MySQL,
SQL, SQL PLUS, Pro*C, PL/SQL. Web application servers and integrations with CMS Confidential Websphere v8.5 Ubuntu server, MS
SQL and MS Server integrations. Confidential Bluemix(app development cloud service), LAMP and XAMPP servers with Tomcat on Apache and integration on various CMS including MS SharePoint, Wordpress, Drupal and Kentico CMS. Maven2.x integration on Eclipse, Integrating GIT on Ubuntu server 14.04 and 12.04 and hardware virtualization (devices and servers).
Operating Systems: Linux, UNIX, Windows 95-10, iOS, OSX, Android and Cisco IOS.
Tools: MS Office, SQL Server Management Studio, Microsoft Project, Altova, Visual Studio.NET, DeuterlDE, Nuxeo Dev suite
Software developer and cyber security developer
Responsibilities:
O System analysis/design and Full stack web development for Business intelligence tools and integration with databases and content management systems, Confidential cognos Bl, Nuxeo suite,Pega7,Targit Bl, Necto, Information Builders Bl tools, work flow management and Bl tools such QIik sense, QIik sense cloud, K2 and other data visualization management tools integrating better solutions in data warehousing and big data. Such integration includes Bl and Data visualization solutions together with Oracle PL/SQL, MySQL and other SQL variants.
O Advanced software and mobile app (Android SDK and swift for iOS) development in multiple frameworks and coding in the .Net framework, Dreamweaver, Drupal, Ms SharePoint, ASP.Net MVC, VBA, VB scripts, C#, Visual C#, PHPLib, PHP 4 and 5, CakePHP and JavaScript, Winforms for linQ, Perl, Python for mobile, web and desktop applications including Web and CMS development and design.
O Knowledge of SVN and WAMP, LAMP and APACHE servers as well as network and web application security and pentesting. O Software development and automation.
Responsibilities:
O Coding and offensive tooling of python, perl, powershell and other languages to build ssh botnets, mass compromising ftp, SFTP, SSH, replicating conficker and writing exploits. Forensic investigations, geolocating individuals, recovering deleted items, recovering artifacts from the windows registry, examining metadata in documents, images and examining mobile devices and applications. geolocate ip addresses from captures, investigate popular DDoS tool kits, discover decoy scans, analyze botnet traffic, and foil IDS and IPS.
O Pentesting and scanning for WiFi and Bluetooth devices, sniff, parse wireless traffic, id hidden wifi networks, id malicious wireless kits in use, stalk Bluetooth radios and exploit other bt vulnerabilities.
O Scrape the web for information, anonymous browsing via python,working with dev api's, footprinting and scraping websites, popular social media and creating spear phising emails.
O Antivirus and IDS,IPS evasion techniques. Building malware with Python for the purpose of evading antivirus systems and other Endpoint security appliances.
O As a software developer, the skills reinforced are those related to researching, designing and writing new software programs. In general perspective it involved testing new programs, fault finding, evaluating and developing software that make computers and hardware work, whereas products that suffer from incompatibility today were managed and modified to work in their integrated platforms. Some of the job experiences involved monitoring security and penetration testing for critical systems (e.g., e-mail servers, database servers, web servers, SCADA servers and CMS) Making changes to highly sensitive computer security controls to ensure appropriate system administrative actions (investigating and reporting noted irregularities).
O Capturing and defining the security test requirements.
O Planning, research, and design robust security architecture test strategy for any IT project. O Perform vulnerability testing, risk analysis, and security assessments.
O Research security standards, security systems and authentication protocols with the Client
Pay: ₹700,000.00 - ₹1,000,000.00 per year
Work Location: In person
