Pentest Management

Responsibilities

• Job Description:

– Participate in the implementation of penetration testing (pentest) services for clients: receive and define the requirements, scope, and assurance conditions of assigned pentest projects

– Break down tasks according to the pentest process and assign them to team members involved in the project execution

– Guide pentesters in performing cybersecurity assessments for applications

– Control service quality, adhere to processes, resources, and implementation timelines for assigned projects

– Serve as the technical point of contact, working with internal VCS departments (Account Management, Customer Service, Project Management) & Clients to coordinate the resolution of issues within the scope of service provision

– Research and improve processes, checklists, and new techniques to enhance service quality, labor productivity, and reduce error rates. Ensure Service Level Agreements (SLAs) according to signed contracts with Clients

Qualifications

• Educational Background:

– Bachelor’s degree in: Information Security; Information Technology, Computer Science, Mathematics-Informatics…

– English proficiency equivalent to TOEIC 650 or higher

• Requirements/Competencies:

– Thorough understanding of application vulnerabilities and their exploitation techniques

– Thorough understanding of Secure Coding Guidelines, proficient and secure programming skills in one or more programming frameworks

– Knowledge of protection and prevention mechanisms, and knowledge of analyzing and building 1-day payloads

– Thorough understanding of the application pentest process and application security assessment methodologies (Blackbox, Greybox, Whitebox)

– Thorough understanding of Web and Mobile application security assessment checklists based on the international OWASP standard

– At least 2 years of experience in an application security assessment role

– Information security certifications are an advantage: OSCP, OSWE, CPENT, Security+…