CONSULTANT
HCLTech
- Chennai, Tamil Nadu
- Permanent
- Full-time
Consistently output superior quality of deliverable
Possess an entrepreneurial attitude to excel in loosely defined scenarios
Ethical Hacking security certification is added advantage
Security expertise, especially in security requirements or threat modeling
Contributes to developing and implementing tools for penetration testing and early warning of weaknesses or possible incidents building on methodologies as promulgated by NIST, ISO, to ensure useful, measurable, and repeatable methods applied to quantifying risk
Publish security
Collaborating with a variety of internal stakeholders (security consultants, project managers, development teams, security architects, technical SME s) to deliver high quality penetration tests
The production of penetration test reports which highlight and clearly articulate vulnerabilities and weaknesses to stakeholders in non technical language
Developing testing plans to successfully conduct application testing, infrastructure testing, scenario based testing, process testing, social engineering consistently throughout DLG
Reporting on and suggesting fixes to vulnerabilities identified
Managing remediation of vulnerabilities with Business owners, 3rd party vendors and internal resources
Identifying potential network, system, application and physical security vulnerabilities
Researching existing exploit code and developing mitigation strategies evaluation and implementation(1.) To clealry understand the client's cybersecurity environment and respective technological products. (2.) To identify and mitigate cybersecurity gaps in the client's environment and Skill Enhancement (3.) To complete assigned projects and tuningortechnical enhancement activities within the agreed timelines and support in the maturation of client's security postureorcomplianceorprocesses through idea generation and value creation. (4.) To analyse security concerns in Change Management Process and implement tools for Cyber Security improvement. (5.) To investigate cybersecurity incidents, perform RCA, work and coordinate with teams for all the ongoing critical security issues. (6.) To enable knowledge transfer through creationor maintenance of process documents; and training for specific tools to ensure all team members are updated on the tools and processes used (7.) To update client and stakeholders on current project progress and ongoing critical issues