Network Penetration Tester

Description:

We are an e-commerce company located in DMCC and are currently inviting outstanding Network Penetration Testers to join our team, to help enhance our system and network security capabilities.

**Job Requirements:**

1. Primarily participate in large-scale offensive and defensive confrontations, penetration testing, and internal network penetration projects.

2. Research offensive and defensive techniques, have a certain development capability.

3. Keep track of the latest offensive and defensive technologies, and have some code audit capabilities.

**Skills Required:**

1. Have a deep understanding of the principles, dangers, exploitation methods, and remediation plans for common web security vulnerabilities, and be able to independently complete penetration testing projects.

2. Proficient in one C2 series related tool, and have an understanding of the C2 implementation principles.

3. Master at least one development language, including but not limited to C/C++/Java/Python/C#/GO.

4. Familiar with code auditing or have vulnerability mining and analysis capabilities.

5. Have relevant understanding of Windows/Linux, lateral movement, domain, privilege maintenance, and anti-virus evasion techniques (TTPS).

6. Willing to share, with good communication and teamwork skills.

7. If not fully capable of completing job responsibilities, have confidence in acquiring the above capabilities in a short period of time under the guidance of colleagues.

**Bonus Points:**

1. Published related articles on major security forums.

2. Have rich practical penetration experience, with experience in complex environment penetration.

3. Participated in large competitions or achieved good rankings.

4. Own a CVE number or have submitted related vulnerabilities to well-known vendors, with acknowledgments.

5. Hold professional certificates, such as CISSP, CEH, CISM, CompTIA Security+, OSCP, CCSP, GSEC.