Senior VAPT Engineer

I. Purpose

To accomplish all assigned tasks by the management in a timely and effective manner as deemed necessary for the betterment of the organization as a whole.

II. Duties and Responsibilities

1. Assist the Technical Consulting Manager and provide mentorship and guidance to engineers.
2. Evaluate, recommend, and implement new tools and technologies to enhance the team's capabilities.
3. Perform initial review on reports and documentation generated by the engineers.
4. Ensure the execution of services within the allocated budget hours or parameters defined by the Service Level Agreement.
5. Obtain professional certifications and actively participate in relevant training sessions related to the provided services.
6. Deliver high-quality services to clients with the goal of ensuring customer satisfaction.

A. Vulnerability Assessment and Penetration

1. Plan and execute Vulnerability Assessment (VA), Vulnerability Management (VM), Vulnerability Assessment and Penetration Testing (VAPT), Phishing Simulation, and Red Teaming activities.
2. Evaluate the effectiveness of existing security controls and provide recommendations for improvements.
3. Simulate real-world cyber-attacks to identify potential weaknesses.
4. Prepare detailed reports on findings, and recommended remediation strategies.
5. Communicate findings to technical and non-technical stakeholders in a clear and understandable manner.
6. Work closely with cross-functional teams to integrate security best practices into development and operational processes.
7. Collaborate with IT teams, developers, and system administrators to address and resolve security issues.
8. Stay informed about the latest security threats, vulnerabilities, and industry best practices.

B. Digital Forensics and Incident Response

1. Conduct advanced digital forensics investigations on various digital devices, including computers, servers, mobile devices, and network equipment.
2. Utilize industry-standard forensic tools and techniques to acquire, analyze, and preserve digital evidence.
3. Lead and coordinate incident response efforts during cybersecurity incidents, including data breaches, malware infections, and unauthorized access.
4. Develop and implement incident response plans to contain and eradicate security incidents effectively.
5. Collaborate with cross-functional teams to minimize the impact of incidents, providing guidance on corrective actions.
6. Prepare detailed and well-documented reports outlining findings, methodologies, and recommendations.
7. Contribute to post-incident reports, sharing insights and lessons learned for continuous improvement.

III. Qualifications

A. Minimum Education

1. College Graduate or Diploma holder of any computer-related course.
2. Preferably a degree in Information Technology, Engineering, or a related field.

B. Minimum Experience/Training

1. 2 years+ experience working in Vulnerability Assessment and Penetration Testing, Red Teaming or Security Operations particularly in Digital Forensics and Incident Response.
2. Knowledge of ITIL, Infrastructure related technologies & understanding of business relevance of the technologies.
3. Experience working with IT systems and software related to Vulnerability Assessment and Penetration Testing, or Digital Forensics and Incident Response.

C. Competency

1. Effective team player with collaborative skills, capable of analyzing substantial technical data in a fast-paced environment.
2. Strong problem-solving abilities, analytical skills, and effective time management.
3. Positive, energetic, and enthusiastic demeanor with keen attention to detail.
4. Excellent multitasking and task prioritization skills.
5. Self-motivated, proactive, and customer-centric in approach.
6. Quick learner with adaptability to dynamic working environments.
7. Capacity to exercise judgment in high-pressure situations with minimal external guidance.
8. Broad knowledge of cybersecurity and privacy principles.
9. Familiarity with computer networking concepts, protocols, and security methodologies.
10. Understanding of laws, regulations, policies, and ethics relevant to cybersecurity and privacy.
11. Proficiency in risk management processes, encompassing methods for assessing and mitigating risk.
12. Familiarity with cyber threats, vulnerabilities, and the operational impacts of cybersecurity lapses.
13. Knowledge of traffic flows across the network, encompassing Transmission Control Protocol (TCP), Internet Protocol (IP), Open System Interconnection Model (OSI), and Information Technology Infrastructure Library (ITIL).
14. Awareness of application vulnerabilities and system/application security threats and vulnerabilities.
15. Ability to perform penetration testing on network devices, servers, workstations, APIs, Web and Mobile Applications.
16. Skills in conducting vulnerability assessment, vulnerability management, phishing simulation, and red teaming activities.
17. Knowledge of programming language structures and logic, including the ability to apply programming language structures and logic.
18. Understanding of MITRE ATT&CK Framework and NIST SP800-61.
19. Skills in identifying, capturing, containing, and reporting malware.
20. Familiarity with designing incident response procedures.
21. Understanding of investigative implications related to hardware, operating systems, and network technologies.
22. Proficiency in data carving tools and techniques, with awareness of anti-forensics tactics, techniques, and procedures.
23. Comprehensive knowledge of processing digital forensic data and reverse engineering concepts.
24. Proficiency in malware analysis tools and binary analysis.
25. Competence in preserving evidence integrity according to standard operating procedures or national standards.
26. Skills in using digital forensics tools and conducting forensic analyses in multiple operating system environments.

D. Trainings & Certifications (is a plus)

1. CompTIA Network+, Security+
2. EC-Council CEH, ECIH, CHFI, CSA, CTIA, ECSA, LPT, CPENT
3. eLearnSecurity eJPT, eCPPT, eCPTx, eWAPT, eMAPT, eCIR, eCDFP
4. Any other related certifications

IV. Working Conditions

1. Personal and professional development (certified training, on-the-job coaching & mentoring, career progression support)
2. Shifting & Reporting to Office (will be WFH if advised by the management)
3. Possible to work on extended hours
4. On-call Duty