Penetration Tester

Job description

·  Job Description:

Job Description:

·  Execute a penetration testing and/or an application security assessment by oneself independently or under a team lead.
·  Propose Threat & Vulnerability Management solutions, addressing client business issues and objectives using a combination of DXC standardized and customized services.
·  Developing and quality assuring security test reports
·  Performing a variety of security testing assignments, including red teaming, infrastructure and applications

Qualifications:

·  Minimum 5 years of "hands on" Penetration Testing Experience with Web, Mobile applications and Network Infrastructure.
·  Strong expertise with common Penetration Testing Tools. like NMap, Nessus, Metasploit, WireShark, Burp Suite, and TCP Dump.
·  Required certification: OSCP or SANS GWAPT/ GPEN or equivalent. (preferred, but not required)
·  Ability to perform source code review
·  Basic understanding of TCP/IP networking concepts, Reverse Engineering and secure coding principles will be added advantage.
·  Ability to document and present the penetration testing reports including recommendations to fix.
·  Understanding of any one Penetration Testing standards such as OSSTMM or OWASP.
·  Business level written and verbal communication in English and Chinese.
·  Must be flexible with regards to travel