Experience – 2 to 5 Years

Department – Security & Privacy

We are looking for experienced consultants to join our S&P team at Protiviti. The role will primarily involve executing and managing diverse client engagements. While the role is based in Oman resources may travel across various client locations in the Middle East, etc.

The successful applicant will be responsible for assessing the security posture of client systems, platforms, and processes to protect and continually improve the confidentiality, integrity, and availability of information systems in accordance with the client's business objectives, regulatory requirements, and strategic goals.

Responsibilities

1. Provide innovation within the context of the Vulnerability and Penetration Testing (VAPT) program in relation to both process and technology.

2. Serve as a Subject Matter Expert (SME) for the Attack & Pen function.

3. Perform authorized attack surface reviews, penetration tests, and red team assessments against specific targets.

4. Provide assessment reports that are easily understandable by the target audience and include practical and reasonable recommendations based on sound risk management principles.

5. Update standards and procedures designed to continually improve security posture

6. Assess the sufficiency of policies, standards, and procedures relative to security best practices.

7. Contribute to the security-related information repositories and other business development endeavors.

8. Mentor junior members of the team and provide constructive consultation to other peer groups.

Background Requirements 1. Computer Science Bachelor’s Degree or substantial equivalent. 2. 2 to 6 years of professional experience in information security with a focus on technical assessments. 3. Commanding knowledge of pen testing concepts and best practices. 4. Extensive experience with common Pentesting tools such as Nessus, Appscan, Burp Suite, Nipper, Exploit Pack etc. 5. Proficiency with other common attack tools and frameworks such as Wireshark, Kali, and Metasploit, etc. 6. Ability to validate the presence of identified vulnerabilities with accuracy.