Ethical Hacker

Job Summary:

We are seeking a highly skilled and motivated Ethical Hacker to join our Information Security team. The ideal candidate will be responsible for identifying vulnerabilities in our systems, networks, and applications before malicious hackers can exploit them. You will conduct penetration testing, simulate cyber-attacks, and provide actionable recommendations to strengthen our security posture. This role requires a deep understanding of cybersecurity principles, tools, and techniques, as well as a strong ethical mindset to protect our organization's digital assets.

Key Responsibilities:

Penetration Testing: Conduct authorized simulated attacks on systems, networks, and applications to identify vulnerabilities and weaknesses.

Vulnerability Assessment: Perform regular scans and assessments to detect security flaws in hardware, software, and configurations.

Security Audits: Evaluate the effectiveness of existing security measures and recommend improvements.

Exploit Development: Develop and test custom exploits to understand the impact of potential vulnerabilities.

Incident Response: Assist in investigating and mitigating security breaches or incidents.

Reporting: Document findings, risks, and remediation steps in detailed reports for technical and non-technical stakeholders.

Security Training: Educate employees on cybersecurity best practices and raise awareness about potential threats.

Tool Development: Create or customize tools and scripts to automate security testing processes.

Compliance: Ensure systems and processes comply with industry standards and regulations (e.g., GDPR, HIPAA, PCI-DSS).

Threat Intelligence: Stay updated on the latest cybersecurity threats, trends, and attack techniques.

Qualifications:

Education: Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent experience).

Certifications: Relevant certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), CISSP (Certified Information Systems Security Professional), or similar.

Experience: Proven experience in ethical hacking, penetration testing, or red teaming.

Technical Skills:

Proficiency in penetration testing tools (e.g., Metasploit, Burp Suite, Nmap, Wireshark).

Strong knowledge of operating systems (Windows, Linux, macOS) and network protocols.

Experience with scripting languages (e.g., Python, Bash, PowerShell).

Familiarity with cloud security (AWS, Azure, GCP) and mobile application security.

Soft Skills:

Strong analytical and problem-solving abilities.

Excellent communication and teamwork skills.

High ethical standards and integrity