Desired Skills and Experience
- Conduct manual audits and intrusion testing;
- Perform automated audits and intrusion testing;
- To suggest short, medium and long term solutions to the problems encountered;
- Elaboration of technical and managerial reports of tests carried out;
- Elaboration of the planning of operationalization of corrective measures;
- Internal customer service, monitoring and support in the process of corrective measures;
- Conduct training related to security matters.
- Experience in performing activities related to all stages of an invasion test (planning and preparation, obtaining information, probing and mapping, vulnerability identification, exploration, documentation and reporting);
- Knowledge of published methodologies and norms, recommendations oriented or that address invasion tests, among them: OSSTMM, PCI-DSS, NIST, ISSAF, OWASP and others;
- Solid Knowledge in Datacenter, Switches, Router and Firewall administration (any, but Cisco and Juniper are differential);
- Vast knowledge in VMWare, XenServer, Linux, Cisco /Juniper;
- Knowledge in TCP / IP management, Virtualized Servers (VMWare, Hyper-V (Openstack would be a differential) and Linux;
- Experience in managing critical environments, Cloud
- Experience (AWS, Google Cloud or Azure), accustomed to using monitoring tools, any development skills would be a differential (preference for Python, Bash or Ruby) and server provisioner (Puppet or Chef).
Apply