Technology Specialist - CDO

Expected

• CEH

• CIR

• CISM

• CISA

• CGEDIT

• KQL

• Bash

• PowerShell

• Python

• Agile

• VMWare ESXi

• storage

• Azure

• DB

• AWS

• NTP

• SMTP

• patching

• Antiviru

Operating system

• 3+ years working experience in security operations and advanced level of understanding regarding systems security at both technical and procedural level

• good level of understanding of infrastructure vulnerability scanning tools, EDR solutions

• understanding (technical aspects of) penetration testing and results (including scoping and organizing of pentests, use of vulnerability scanners, vulnerability management tools) and basic knowledge of web application vulnerabilities and standards

• good understanding of IT fundamentals across networking (such as DNS, SNMP, DHCP, IPSEC etc.), system, and application layers

• Bachelor degree or equivalent experience

• passion for security and enjoys solving problems

• understanding the Agile mindset and have basic knowledge on working in a Scrum Team. You show end-to-end ownership on work that you do

• excellent knowledge of English, written and verbal

• experience with outsourced managed services, using ITIL processes

• certifications such as CEH, CIR, CISM, CISA, CGEDIT, any of the OWASP or similar are a plus.

• knowledge of industry standard security frameworks for information systems (CVSS, CIS Benchmarking, OWASP , NIST, ISO 27001/2, CSA, COBIT)

• basic familiarity with scripting programming e.g. Bash, PowerShell, Python

• relevant technical solutions such as vulnerability management tooling (Nessus, Qualys, Defender for Endpoints)

• kusto query language knowledge (KQL) is a plus

• vulnerability remediation tools & techniques

• system security (operating systems, applications), networking, and web applications

• basic knowledge on security solutions (SSL, Remote Access, IPSEC, Reverse Proxy, IDS/IPS, Firewall, Multi Factor Authentication) and practical knowledge on application security controls

• threat Modelling experience.

• basic knowledge on other infrastructure. Eg: Active Directory, DNS, IP Addressing, Azure AD

• Penetration testing, Malware engineering

• Offensive security specialist (e.g pen tester, ethical hacker, etc.)

• Sysdmin skills (Linux/MAC/Windows)

• Network admin skills

• Network security administrator

• Enabling services (e.g NTP, SMTP, patching, Antivirus)

• Server infrastructure (VMWare ESXi, storage, Azure, AWS)

• basic cryptography knowledge (basic algorithm knowledge)

• DB knowledge

• authentication protocol knowledge.