Penetration Tester Associate

Specialism Cybersecurity & Privacy Management Level Associate Job Description & Summary A career in our Threat, Intelligence and Vulnerability Management practice, within Cybersecurity and Privacy services, will provide you with the opportunity to help our clients implement an effective cybersecurity programme that protects against threats, propels transformation, and drives growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organisations, partners and customers. You’ll play an integral role in helping our clients ensure they are protected by developing transformation strategies focused on security, efficiently integrate and manage new or existing technology systems to deliver continuous operational improvements and increase their cybersecurity investment, and detect, respond, and remediate threats. Our team helps organisations to rapidly and effectively respond to threats against potential security incidents by helping to detect, respond to, investigate, and remediate threats across the incident management life cycle. Perform technical security assessments, such as penetration testing, source code review, and security system configuration testing on various cyber assets, such as websites, mobile application, networks and IoT Articulate and present security vulnerabilities clearly in both written and verbal reports to clients. Develop tools or scripts as necessary to create proof-of-concepts in challenging engagements. Conduct security research to discover critical hidden vulnerabilities and interpret results from common security tools. Complete client engagements effectively and efficiently. Preferred skills Bachelor’s degree in Computer Engineering, Computer Science, Information Systems or a related field. A Master’s degree is a plus Have knowledge of industry standard classification schemes, such as NIST, ISO27000, and PCI DSS. Be able to conduct and simulate manual penetration tests. Be able to code at least in one scripting language such as SQL, C ++, JavaScript, Ruby, or Python. Have demonstrated leadership, problem solving, and verbal and written communication skills. You need to be able to communicate clearly in both Thai and English. Have proven analytical, decision-making, and presentation skills. Have a high level of MS Office proficiency. Be able to adapt and learn new things. Be able to prioritize tasks, work on multiple assignments, and manage ambiguity. Be able to work both independently and as part of a team with professionals at all levels Offensive Security Certified Professional OSCP certifications are beneficial but not required.