Lead Cyber Security- VAPT

Reporting Structure

Reports to Senior Manager – VAPT

Education

·University degree in the field of computer science or IT.

Experience/ Qualifications

·5+ years of Information Security background is essential.

·3+ years of Penetration testing, Red teaming and  or vulnerability assessment experience

·Experience in evaluating the control environment through Ethical Hacking, Penetration Testing, Red Team assessments.

·Evaluation of security technologies to detect vulnerabilities

·Hands on experience in black-box, grey-box penetration testing on platforms like .Net, Java etc.

·Hands on experience on mobile testing of android and IOS

·A high-level appreciation of Security Architecture and Infrastructure

·Should be familiar with the best practices of OWASP, SANS Institute, ISACA, GAO, FISCAM, NSA, NIST, Internet Engineering Task Force (IETF)

·Develop a framework to test compliance of applications / systems.

·Experience in project management

Industry

·Information technology

Responsibilities

·Conduct internal / third-party Ethical Hacking / Vulnerability Assessment / Penetration Testing, Red Team assessment on business-critical assets and processes.

·Liaison with external ethical hacking / penetration testing for RBI projects

·Coordinate with security intelligence framework to obtain latest threats & vulnerabilities

·Prepare security effectiveness reports for management

• Testing the applications / systems for compliance to RBI / ReBIT Information Security practices
• Ensure new applications are inducted into Data centre after conducting pen testing / vulnerability assessment

·Prioritizing security vulnerabilities identified in ethical hacking, penetration testing and application / system testing based on business impact and update Security operations team for mitigating them

·Follow up on closure of these gaps and escalate when necessary

·Deciding the most relevant and applicable metrics for measuring security effectiveness and deciding on the requisite algorithms for their quantification

Certifications (any two)

• CISSP
• CEH / OSCP / OSCE / GPEN

Employment Type

All positions are on fixed term contract on a full-time basis exclusively for ReBIT, initially for a period of five years, extendable by mutual consent