Digitalization has opened the doors for cybercrimes and so has the number of ethical hacking jobs
The expanding universe of digitalization has brought in many positive virtues of digital communication improving the quality of business operations. Adopting easy and faster ways of doing business has made way for the rising threat of cyberattacks and hence the requirement for ethical hackers. Businesses and government agencies are on a constant lookout for people with suitable skill sets in ethical hacking. If you are keen to start a career in cybersecurity and looking for a professionally rewarding cybersecurity job, you are at the right place. Here are the top 10 ethical hacking jobs to apply for in 2022 in big tech companies.
1.Specialist, Technology Security
Primary / Mandatory skills:
Overall Experience: 6 – 10 Years
- Log Aggregation Analysis to identify new attack/Fraud techniques from bad actors and identify any signs of compromise: 3 – Intermediate (practical application)
- Monitor Akamai Logs/ APIs and Traffic to identify new security rules: 3 – Intermediate (practical application)
- Identify automation opportunities to mitigate prod risk and fraud: 3 – Intermediate (practical application)
Orchestrate System Security Patching:3 – Intermediate (practical application) - Monitor Akamai Logs/ APIs and Traffic to identify new security rules: 3 – Intermediate (practical application)
- Akamai Security Center, Splunk, Dynatrace, Quantum Metrics, EFK, BurpSuite, Nessus: 3 – Intermediate (practical application)
- Excellent written and verbal English communication skills to work in a Global team
Secondary / Desired skills:
Contribution to open-source projects
2.Director, Security Engineering
Educational qualification and experience requirements
B.S or M.S. degree in Computer Science, Security Engineering or equivalent.
Experience in leading enterprise-scale projects and remote project personnel
10+ years of technical and engineering leadership experience and including experience leading multiple levels of management.
7+ years of experience effectively leading teams
Work experience in cloud security, application security, enterprise security, cyber security, Information Security at a large scale
Detailed understanding of enterprise security concepts, practices, and procedures
Experience leading cross functional teams (security engineers and program management)
Experience with Software Development and Security and knowledge in agile practices
Should have strong knowledge and understanding of Cyber Security, risks, threats in infrastructure, network, Cloud and Data Centre Technologies, CISM or CISA a plus
Deep experience and expertise in assessing and preventing internal and external security threats, including but not limited to the prevention, investigation, and prosecution of the theft and unauthorized access to the company's intellectual property and confidential information.
Expertise in architectural and security assessments, threat modeling applications, and risk management.
In-depth understanding of the security issues that internal/external facing apps encounter, as well as the ability to describe the implications on technical and business users.
Consistent track record of developing and implementing methods to enable secure and compliant architectures.
Solid understanding of Infrastructure as code, security as code and Compliance as code
Apply here
3.Cybersecurity Analyst
Location: Pune, Maharashtra
Skills and experience required
Skills that will help you in the role:
- Proficiency of Operating System fundamentals and OS Security (Windows & Linux);
- Proficiency in Networking Principles, Protocols, & Practices;
- Understanding of traditional ITIL concepts Incident, Change and Problem management;
- Understanding of Cloud Security Principles (AWS/Google/Azure)
- Understanding of Open Source network analysis tools, and Open-source intelligence tools (OSINT).
- In-depth knowledge of the Cyber Kill-Chain, Intelligence-driven defence and security architectures.
- Ability to help write concise reports based on complex data with accuracy, brevity, and speed.
- Understanding of Ethical Hacking from the perspective of a Blue-team member; the countermeasures and mitigation controls which can be implemented to minimise the threat landscape and risk to an organisation.
- Appreciation of End Point security products including firewalls, Anti-virus and network access control.
- Appreciation for programme and project management methodologies.
- Experience delivering technical detection and response programs and initiatives is also desirable.
- Active SANS certifications in the areas of network, incident handling, malware and forensic analysis (GREM, GCIA, GCFA, GCIH) are desirable, but not essential.
- Strong working knowledge of Splunk and the Splunk Query Language.
- Understanding and experience of reverse-engineering malware would also be beneficial, but is not essential.
- A good technical understanding of the threats against the financial industry from both the physical and Cyber threat domains.
4.Information Security Specialist
Location: Pune, Maharashtra
Skills and experience required
- Align standards, frameworks and security with overall business and technology strategy
- Provide guidance towards Information Security risk within the Information Security community.
- Ensure Information Security risks are managed and coordinated according to existing policies and guidelines.
- Potential people management of global virtual teams
- Information security expertise, demonstrating solutions delivery, principles and emerging technologies
- One or more of the following education/certification attainments will be beneficial in addition:
- CISSP (Certified Information Systems Security Professional) or equivalent
- CCSP (Certified Cloud Security Professional)
- CISM (Certified Information Security Manager) or equivalent
- CEH (Certified Ethical Hacker)
- CISA (Certified Information Security Auditor)
5.Cybersecurity Engineer
- Bachelor Degree in ECE, IT, CSE, EEE, E&I
- 4- 7 years of operating experience in the OT Industrial Control System or computer networks
- Certification: Cisco Certified Network Associate Security (CCNA Security) / Certified Ethical Hacker (CEH) / Certified Information Systems Security Professional (CISSP) / ISA99 or IC32-37 related OT certification Maintain Application Life Cycle management for patch Monitoring (Hardware's / Softwares / Servers and Workstations)
6.Security Analyst
Location: Hyderabad/Secunderabad
Required skills and experience
Required Skills & Experience
- 2 to 5 years of full-time experience within a Security Operations Centre (SOC) or incident response team
- Strong interest in information security, including awareness of current threats and security best practices
- Familiarity with system administration and security controls on Microsoft Windows and Linux
- Experience investigating security issues and / or complex operational issues on Windows and Linux
- Knowledge of email security threats and security controls, including experience analysing email headers
- Strong technical understanding of network fundamentals and common Internet protocols, specifically DNS, HTTP, HTTPS / TLS, and SMTP
- Experience analysing network traffic using tools such as Wireshark, to investigate either security issues or complex operational issues
- Experience reviewing system and application logs (e.g., web or mail server logs), either to investigate security issues or complex operational issues
7.Cyber Security Analyst
Requuired skills
Cyber Seconse & resolution, data breach investigation/ preemptive actions, vigilant threat hunting/ cyber-attack, including viruses, ransomware, cyber espionage and insider sabotage and evaluate any global risk that carry a significant risk to the enterprise.
Responsibilities
• Responsible for closing monthly Project compliance audits with Auditor and Security leadership
• Lead staff to proactively identify, prevent to security incidents by assessing logs from various sources such as servers, IDS, IPS etc.
• Closely work with MSS, IAM & SOC teams for any escalations and incidents of violations
• Tools responsible McAfee, Symantec, Qradar, Zscaler proxy, Nessus Tenable, Carbon Black Protect, Cylance Protect, FireEye, PKI, Okta
• Perform risk assessment through various workshops with stakeholders while maintaining risk register along with RCA
8.Security Analyst
Skills required
- Penetration testing techniques and strategy.
- OWASP top 10 and other major vulnerabilities.
- VAPT on Web/Android/iOS.
- Good understanding of networking concepts.
- Technical support to the Web/server team for vulnerability closure.
- Hands-on exposure to Burp Suite, Nessus, Qualys and other security tools.
- WAF implementation
- Keep track of new vulnerabilities and various security standards.
- Security Audits like PCI-DSS, ISO 27001:2013, SOC-1, SOC-2 Audits.
9.Analyst, Cyber Threat Response
Company: Standard Chartered
Skill requirement
- Diploma or higher educational qualification in Engineering, Computer Science/Information Technology or an equivalent qualification in a relevant discipline.
- At least 2 years of experience in Information security, preferably in Banking and Financial services sector, with 1 year of hands-on experience working in a Security Operations Centre (SOC).
- Well-versed in Cybersecurity Incident Analysis and Response and Cybersecurity Defensive Operations (Blue Team).
- Strong understanding of core Enterprise Information Technology and Computer Networking concepts (Desktop / Laptop, Mobile Device, Server, Network Device, LAN and WAN)
- Basic knowledge of selected IT Service Management (ITSM) processes (Event Management, Incident Management, Change Management, Service Assets and Configuration Management, Service Level Management).
- Exposure to Security Information and Event Management solutions, preferably Splunk ES. User Behaviour Analytics (UBA) exposure is desirable.
- Exposure to working with Managed Security Service Providers (MSSPs).
- Exposure to case and workflow management tools.
- Exposure to Security Orchestration, Automation, and Reporting (SOAR) tools, preferably Splunk Phantom.
- Exposure to Endpoint Security and / or Endpoint Detection and Response tools, preferably Symantec.
- Exposure to Network Security solutions such as Email Security and Proxy Server solutions, preferably Symantec and Zscaler.
- Demonstrated ability to solve problems of medium complexity and come up with innovative, forward-thinking solutions.
- Self-motivated and able to work independently. Comfortable with working remotely for extended periods if required.
- Above-average oral and written communication skills, with English at ILR Level 3 or better. Basic familiarity with Microsoft Office or similar productivity software, with the ability to produce documents, spreadsheets, and presentations of medium complexity.
- Demonstrated ability to work with a diverse, geographically-dispersed team.
10.Senior Information Security Analyst
Skills required
- A Bachelors Degree in Information Systems, Computer Science, Engineering, and/or other related discipline or equivalent experience
- 6+ years of progressive experience in the information security domain and exposure towards Data Loss Prevention solution
- 3+ years experience in supporting audit and compliance requirement on high priority initiatives
- Hands on experience on Splunk tool
- Experience in performing quality reviews of the security events identified or remediated
- Strong experience in developing process/procedures and reports for senior leadership team.
- Proven experience in internal audits, evidence preparation and gathering
- Knowledge and understanding of cloud computing and Office 365
- Ability to prioritize work, meet deadlines, achieve goals, and work under pressure in a dynamic and complex environment
- Knowledge on industry cybersecurity standard frameworks (e.g. NIST)
- Strong hands-on skill with MS Excel, Power point
- Excellent communication and documentation skills with good attention to detail
Join our WhatsApp Channel to get the latest news, exclusives and videos on WhatsApp
_____________
Disclaimer: Analytics Insight does not provide financial advice or guidance. Also note that the cryptocurrencies mentioned/listed on the website could potentially be scams, i.e. designed to induce you to invest financial resources that may be lost forever and not be recoverable once investments are made. You are responsible for conducting your own research (DYOR) before making any investments. Read more here.