المهارات
Requirements
Needed Competencies:
- Excellent communication skills to convey technical findings to both technical and non-technical audiences.
- Ability to manage multiple projects, prioritize tasks, and meet deadlines under pressure.
- Actively listen to and understand the concerns and priorities of stakeholders from different areas of the organization.
- Foster a collaborative environment where security is viewed as a shared responsibility.
- Effectively mentor and train security best practices to internal teams (developers, operations, etc.).
Knowledge, skills and abilities:
- Familiarity with security tools like OpenVas, Burp Suite, OWASP ZAP, and Metasploit.
- Network security concepts (firewalls, IDS/IPS, network protocols).
- Web application security principles (OWASP Top 10) and testing methodologies.
- Mobile application security testing for Android and iOS.
Preferences:
- Offensive Security Certified Professional (OSCP) or equivalent certification
- Experience in cloud penetration testing (e.g., AWS, Azure, Mendix)
- Demonstrated expertise in identifying and mitigating data exfiltration vulnerabilities across application layers and integration points.
- Experience in code review for control flow and security flaws.
- Experience in low-code/no-code application security testing (a plus).
- Understanding of security standards and frameworks, such as MITRE ATT&CK, Cyber Kill Chain, OWASP Top Ten, and general security best practices.
- Hands-on experience with security frameworks (NIST, ISO27001, etc.) and risk assessment methodologies.
- Experience with scripting languages (Python, Bash) for automating penetration testing tasks.
- Familiarity with security automation tools.
- Excellent written and verbal communication skills to convey technical findings to both technical and non -technical audiences.
- Ability to manage multiple projects, prioritize tasks, and meet deadlines under pressure.
Education:
Bachelors degree (or equivalent experience) in a related field (e.g., computer science, information security)
Experience:
- 3+ years of experience in penetration testing or a related security discipline
- 2+ years of experience with vulnerability management tools and processes
تفاصيل الوظيفة
- منطقة الوظيفة
- عمان الأردن
- قطاع الشركة
- خدمات تكنولوجيا المعلومات
- طبيعة عمل الشركة
- صاحب عمل (القطاع الخاص)
- الدور الوظيفي
- تكنولوجيا المعلومات
- نوع التوظيف
- دوام كامل
- الراتب الشهري
- غير محدد
- عدد الوظائف الشاغرة
- 1