Cyber Security Lead Analyst - Pentesting

Skills required :

• 5 to 8 years of strong work experience in penetration testing, threat modeling and / or secure application testing
• Expertise in conducting penetration testing on various infrastructure and network components including Cloud, Wireless LAN, Active directory etc.
• Thorough understanding of application architectures, understanding of security standards, frameworks and methodologies
• Thorough understanding of protocols such as HTTP, TCP / IP, SSH, RDP, SNMP etc and expertise in exploitation of vulnerabilities in such services.
• Knowledge of web application attacks and defense strategies including those found in the OWASP Top 10, Mobile Top 10 and SANS top 25.
• Knowledge using leading testing tools such as Burp suite, NMAP, Kali OS , Nessus, Metasploit etc.
• Experience with various operating systems, network security technologies, web application development technologies, languages and frameworks such as .Net, Java, PHP, Angular JS, NodeJS etc.
• Knowledge of scripting languages such as Python, C / C++, Java / JavaScript.
• Experience with Configuration and Deployment Management Testing, Identity Management Testing, Cookie / Session Management, Authentication / Authorization Testing, Input Validation Testing, Privilege escalation testing, Enumeration testing
• Good communication, presentation and interaction skills
• OSCP certification (preferred), CEH, SANS or Certified Penetration Tester, Certified Expert Penetration Tester or GIAC Certified Penetration Tester, CRTP (Certified Red Team Professional)

Roles and Responsibilities : -

Why Join Us

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Business Insight

At Societe Generale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.

Whether you’re joining us for a period of months, years, or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.

If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.