Lead Penetration Test Engineer / Threat Analyst @ Infopulse in Infopulse

Infopulse, Part of TietoEvry Create, welcomes a talented professional to join our Security team as a  Lead Penetration Test Engineer / Threat Analyst . We are looking for an experienced and responsible professional to be part of our expert team.

Must have:

• 5+ years of progressive experience in IT security
• Good understanding of computer networks, clouds, security solutions and processes
• Well-developed administrative skills in OS (Windows and Linux), docker and cloud environments administration including understanding of and experience in security aspects
• Understanding common security risks for IT infrastructure and it’s components
• Thorough knowledge of common vulnerabilities (e.g., infrastructure, WEB, network, IOT)
• Understanding of common types of WEB security attacks (DNS cache poisoning, ARP spoofing, DDoS, XSS, CSRF, SQL Injection, etc.)
• Deep understanding of MITRE-stack
• Understanding of threat modelling methodologies (CAPEC, STRIDE, Attack Tree)
• Knowledge of the international standards and best practices: OSSTMM, NIST, OSSEC, PTES, MS Ent Cloud Red Teaming
• Strong programming skills in web-related languages including security aspects and best practices
• Experience with C, Java, C# and other related languages
• Strong cybersecurity analysis and situational awareness skills
• Experience in security incidents detection and investigation
• English: upper-intermediate
• Proactive, result-oriented person, who is able to work individually and in a team

Nice to have:

• Professional security certifications (e.g., CEH, CISSP, CISM, CISA, OSCP/OSCE)
• Experience of malware engineering and reverse engineering
• Low-level programing skills

Infopulse, Part of TietoEvry Create, welcomes a talented professional to join our Security team as a  Lead Penetration Test Engineer / Threat Analyst . We are looking for an experienced and responsible professional to be part of our expert team.

,[Performing assessment of overall customer security level and suggest improvements , Threat modelling , Performing penetration testing, vulnerability scanning, secure code reviews , Full scope of penetration testing activities like: WEB applications, desktop applications, infrastructure, mobile applications (iOS, Android), IoT and embedded systems testing , Secure development life cycle assessment and improvements , Providing L3 engineer support to the SOC team for complex security incidents, such as ATP , Managing internal or external human resources for complex projects , Documentation of internal methodology, procedures, and operations enhancement , Mentoring and knowledge sharing with team-mates]

Requirements: Cybersecurity, Windows, Linux, Web security, DNS, Cache, SQL, NIST, C, Java, C#, CISSP, CISM, CISA, OSCP
Tools: .
Additionally: Multisport, Training budget, Private healthcare, Small teams, International projects, Friendly atmosphere, Integration events, Free coffee, Free snacks, Free beverages, In-house trainings, Modern office, No dress code.