DCSL Corporate Services Limited - Our client, a reputable Information Technology Consulting Group with Pan African Operations is recruiting to fill the position below:
Job Title: Cyber Security Consultant
Location: Lagos
Job Description
- The Cyber Security Consultant will be responsible for evaluating the security of IT infrastructure by continuously assessing, exploiting vulnerabilities to find out where hacking threats may lie and compliance to relevant standards and best practice.
- The Cybersecurity Consultant will report functionally to the Head, Technical Consulting Unit and administratively to the Team Lead and Line Manager.
Responsibilities
In fulfilling his or her responsibilities, the successful Candidate will:
- Plan, select, design and create appropriate tools for penetration testing
- Perform the penetration test on computer systems, networks, web-based and mobile applications
- Document methodologies
- Gather the data intelligence not only from the output of the automated penetration tools but also from information gathered from earlier stages to identify vulnerabilities that the tools may not see
- Review findings and provide appropriate feedback to clients
- Analyse the outcomes and make recommendations for security improvements
- Carry out application, network, systems and infrastructure penetration tests
- Support clients in implementing PCIDSS and ISMS requirements and controls
- Develop and implement a comprehensive set of information security policies, standards and procedures in line with ISO27001 and PCI DSS
- Risk Assess, manage and understand the business impact of introducing new control requirements
- Review physical security and perform social engineering tests where appropriate
- Keep up to date with latest testing and ethical hacking methods
- Enhance existing methodology material
- Provide recommendations for enhancements to existing security controls and work with the business to assess the current security controls and ensure these are fully documented and agreed.
- Any other assigned tasks.
Requirements
- A Bachelor's degree in Computer Security, Computer Science or a related discipline
- Minimum of seven (7) years’ relevant experience
- A Certified member of the Council of Registered Ethical Security Testers (CREST)
- Cyber-security certifications (CEH, eJPT, eCPPT, eWAPT, OSCP, OSWP, OSCE, etc.)
- Good understanding of network protocols, PCI DSS and ISMS
- Solid technical skills in both information security architecture and penetration testing
- Ability to assess testing tools and deploy the right ones
- An excellent understanding of ethical hacking and IT Risk
- Scripting and programming experience are beneficial
- Ability to explain findings to non-technical professionals
- Excellent report writing and presentation skills
- Customer facing skills and a proven track-record of building client relationships
- Able to work independently but also as part of a team
- Flexibility to change direction and manage conflicting demands
- Outstanding organisational and data analytics skills
- Comfortable working in a fast-paced environment.
Relevant experience should entail the following:
- Penetration testing experience of systems, networks, mobile and web-based applications.
- Excellent knowledge and experience of using a variety of threat modelling tools including open source and commercial mapping
- Some consulting experience is advantageous
- Adept at explaining technical jargon to non-technical parties
- Scripting skills and reverse engineering experience is desirable
- Past experience of using problem solving techniques and developing solutions to meet vulnerability threats
Application Closing Date
4th June, 2019.
How to Apply
Interested and qualified candidates should send their Applications and CV/Resume to:
[email protected] using the "Job Title" as the subject of the mail.