Consultant - VAPT (Information Security)
Sinch, India
Job Description
Sinch is a global leader in the growing market for Communication Platforms as a Service (CPaaS) and mobile customer engagement. We are specialists in allowing businesses to reach everyone on the planet, in seconds or less, through mobile messaging, email, voice, and video.
More than 150,000 businesses, including many of the world’s largest companies and mobile operators, use Sinch’s advanced technology platform to engage with their customers. Moreover, Sinch has been profitable and fast-growing since its foundation. Sinch's core values are Make it Happen, Dream Big, Keep it Simple and Win Together. These values describe how our global organization works and inspire every of our more than 5,000 employees across 55 different countries.
As an Information Security Analyst / Sr. Analyst, you will design and implement IT security systems to protect the organization's computer networks from cyber-attacks. You will also help develop organization wide best practices for cyber security. You will monitor computer networks for security incidents and document all security issues or breaches you find.
Job Overview:
An ideal candidate will have a bachelor's degree / masters degree in computer science with a minimum of 3-5 years of experience in information amp; Cyber security. You need to be proficient in vulnerability assessment, penetration testing and techniques and helping to mitigate the issues and documenting the same. In addition, you will have excellent written and oral communication skill and understand patch management and firewalls, antivirus and IDS/IPS, Anti-malware tools, DLP, Proxy and cloud security concepts.
Key Responsibilities:
- Perform Vulnerability Assessment amp; Penetration Testing using Black-Box / Grey Box External Network VA/PT assessments following structured phases.
- Intimate knowledge and hands-on experience using various vulnerability testing tools like Nessus, Web Inspect, nmap, Burp Suite, Nikto, ZAP, etc.
- Strong knowledge of CVE (Common Vulnerabilities and Exposures) vectors.
- Strong knowledge of the OWASP Top 10, SANS top 25, WASC security Standards, and detailed knowledge of conventional web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Insecure Direct Object Reference, Clickjacking, buffer overflows, etc. Experience in manual application penetration testing of web-based applications, thick-client applications, mobile applications, web services, API etc.
- Should have knowledge of Risk Rating Standards
- Should have an understanding of web application architecture and Secure development life cycle.
- Ability to act upon identified vulnerabilities
- Candidate should have good knowledge and Hands-On Experience of Defensive cyber security; Threat Intelligence; Logs Analysis; SIEM amp; Forensics
- Should have Prepared audit reports and findings tracker sheets for Infra amp; applications.
- Analyze IT requirements and provide objective advice on the use of IT security requirements
- Gather feedback from end users to continue to improve systems
- Design, analyze and implement efficient IT security systems
- Good working experience in security testing amp; monitoring
- Has intermediate to advanced knowledge on Windows server and Linux OS.
Eligibility Criteria:
- 3 to 5 years of experience in information security
- Excellent written and oral communication skills
- Experienced with penetration testing and techniques
- Ability to identify and mitigate network vulnerabilities
- Understand patch management; Risk management amp; Incident Management
- Knowledge of firewalls, antivirus, IDPS, WAF technologies, Microsoft Security technologies and cloud security concepts
- Experienced in installing security software and documenting security issues.
Being you at Sinch
We're a worldwide group of people, committed to diversity. We're working to offer an increasingly inclusive workplace wherever you are. No matter who you are, you'll be able to explore new career and growth options - sharing your voice, building your path and making it happen with us.
We’re proud to be an equal opportunity employer, and all qualified applicants will be considered to join our team regardless of race, colour, religion, gender identity or expression, sexual orientation, pregnancy, disability, age, veteran status, and more.
Your life at Sinch
Being a Sincher is all about learning and being in pursuit of new challenges. Working in the offices, at home, or in a hybrid model, that means celebrating change and the unknown, rolling up your sleeves and seeing what impact you can have on the world. The only way is up, and you’ll be reaching for the opportunities that match where