13 Penetration Tests Jobs

As an individual in this role, you will have the opportunity to contribute to various aspects of security assessments. Your responsibilities will include assisting with security assessments such as vulnerability scans, penetration tests, and static/dynamic code analysis to detect potential security vulnerabilities in applications. Additionally, you will be expected to familiarize yourself with secure coding practices, including principles like OWASP ASVS, and collaborate with development teams to implement these practices effectively. Furthermore, you will play a key role in supporting security testing by carrying out security tests, helping define the scope of testing activities, and analyzing the outcomes of these tests. Your involvement in creating and managing security documentation, which encompasses security plans, policies, and procedures, will be crucial to the organization's overall security posture. In this position, you will also be required to stay informed about emerging security threats, vulnerabilities, and best practices to proactively address potential risks. Moreover, you will be involved in incident response activities, including analyzing logs, determining the root causes of security incidents, and implementing appropriate remediation measures. Participation in security training sessions covering a range of topics such as application security, networking, and cybersecurity fundamentals will be an integral part of your professional development. This role is suitable for individuals seeking full-time employment opportunities and is open to freshers who are enthusiastic about starting their careers in the field of cybersecurity. The work location for this position is on-site, requiring you to be physically present at the designated workplace.,

A career in Cybersecurity, Privacy and Forensics at PwC offers you the opportunity to tackle our clients" most critical business and data protection challenges. You will be an integral part of a dynamic team driving strategic programs, data analytics, innovation, deals, cyber resiliency, response, and technical implementation activities. Working alongside top professionals in Cybersecurity, Privacy and Forensics both at PwC and within our client and industry networks globally, you will play a key role in the Cyber Penetration Testing (CPT2) team. This team focuses on delivering threat actor simulation services, device or application assessments, and penetration tests to help clients understand the tangible risks they face and enhance their preventative and detective controls. As a member of CPT2, you will contribute to assessment and recommendation services that combine deep technical expertise with targeted automation to simulate real threats in client environments. Your involvement in this center of excellence will drive transformative change for PwC's clients while honing your technical skills and capabilities. To excel and prepare for the future in a rapidly evolving landscape, every individual at PwC is encouraged to embody authentic and inclusive leadership qualities across all levels and service lines. The PwC Professional framework serves as a global leadership development tool, setting clear expectations for skills and behaviors needed for success and career progression. As a Senior Associate, you will collaborate with a team of problem solvers to address complex business issues from strategy to execution. Responsibilities at this management level include leveraging feedback and reflection for personal development, delegating tasks for growth opportunities, proposing innovative solutions, extracting insights from current business trends, ensuring quality and accuracy in work, sharing relevant thought leadership, influencing others effectively, building diverse relationships, and upholding ethical standards. In the role of a Technical Writer, you will be part of a team creating high-quality documentation for threat actor simulation services, device and application assessments, and penetration test results. Key responsibilities at this management level involve collaborating with business teams to gather information, creating and maintaining documentation, explaining technical concepts clearly, tailoring content for various audiences, staying updated on cybersecurity trends, analyzing and improving existing content, ensuring compliance with industry standards, and enhancing documentation processes. Basic Qualifications: - Minimum Degree Required: Bachelor's degree - Minimum Years of Experience: 4-9 years Preferred Qualifications: - Preferred Fields of Study: Computer and Information Science, Information Security, Information Technology, Management Information Systems, Computer Applications, Computer Engineering - Certification(s) Preferred: Certification in Technical Writing Preferred Knowledge/Skills: - Familiarity with technical concepts such as application security, network segregation, access controls, IDS/IPS devices, physical security, and information security risk management - Knowledge of security testing tools and protocols - Experience in cybersecurity article writing and technical documentation - Ability to translate technical jargon into user-friendly content - Skills in collaborating with cybersecurity professionals and managing multiple documentation requirements effectively - Proficiency in graphic design and visualization tools for enhancing documentation clarity - Proactive approach to seeking feedback, guidance, and making iterative improvements Professional and Educational Background: - Bachelor's Degree Preferred,

This position will support the IT Audit Group at CohnReznick, with a focus on conducting SOC1, SOC2, and SOC3 audits for third-party service providers, internal control assessments, attestations, penetration tests, and firewall assessments. Responsibilities include participating in the planning and scoping of IT audits for SOC engagements and ICFR audits, leading technology walkthroughs, developing test procedures, executing testing of IT general controls and application controls, and problem-solving to meet critical deadlines. You will communicate engagement status to clients and management, possess knowledge in ITGCs, IT application controls, cybersecurity, and IT infrastructure, and have experience with financial reporting processes. You should be comfortable leading interviews with IT personnel, designing and executing testing for ITGCs, with a focus on Access Management and Change Management. Supervisory skills are required to guide department staff, work independently or in small teams, and multitask effectively. Effective planning, time management, organization, flexibility, attention to detail, and client interaction skills are essential. Experience with Microsoft Office applications and presenting is important. The successful candidate will have 2-4 years of relevant work experience, a Bachelor's Degree in computer science or accounting information systems, and experience in IT external audit, IT internal audit, and Technology Risk, or ITGC assessment for SOX compliance. Knowledge of ERP systems (Oracle, SAP, JDE) and Cloud security (Azure, AWS, Google Cloud security) is a plus. The ability to travel and work overtime during busy seasons is required. Holding a Certified Information Systems Auditor (CISA) and/or CPA certification or working towards it is preferred.,

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion its a place where you can grow, belong and thrive. Your day at NTT DATA The Senior Associate Security Consultant is responsible for developing expertise in their area of specialization. This role is responsible for translating clients cybersecurity requirements and customizing and implementing security solutions into specific systems, applications and product designs. This role identifies and develops the security solutions for clients using company products, outsourced technology solutions and technical tools. This role consults with clients regarding secure product configuration, deployment, and security patches to minimize security vulnerabilities. In addition, this role provides comprehensive scanning, penetration testing, vulnerability assessments, monitoring services and source code analysis and delivers detailed results to clients, as well as guides and supports clients in the development and implementation of product security controls. Key responsibilities: Assists in conducting security assessments, vulnerability scans, and penetration tests to identify weaknesses in client systems. Analyzes security data, logs, and reports to detect and investigate security incidents or anomalies. Prepares and maintains documentation, including security assessment reports, findings, and recommendations. Collaborates with senior consultants to provide advice and support to clients on security best practices and risk mitigation strategies. Learns and uses various security tools and technologies for assessments and monitoring. Stays updated on the latest cybersecurity threats, vulnerabilities, and industry best practices. Assists in evaluating client systems for compliance with industry standards (e.g., ISO 27001, NIST) and regulatory requirements. Communicates effectively with clients to understand their security needs and concerns. Participates in training programs and certifications to develop expertise in cybersecurity. To thrive in this role, you need to have: Strong interest in cybersecurity and a desire to learn and grow in the field. Knowledge of basic cybersecurity concepts, principles, and best practices. Familiarity with common security tools and technologies is a plus. Excellent analytical and problem-solving skills. Effective communication skills, both written and verbal. Ability to work collaboratively in a team environment. Eagerness to stay up to date with the evolving cybersecurity landscape. Academic qualifications and certifications: Bachelor&aposs degree or equivalent in Information Technology or Computer Science or Engineering or related field. Industry relevant certifications such as CISSP, CISM, CEH, GSEC or CompTIA Security+ essential. Required experience: Moderate level of demonstrable experience in the Information Technology Security Industry or relevant experience in similar role within a related environment. Moderate level of experience with security architecture design principles. Moderate level of experience with industry compliance and standards such as ISO 27000, PCI:DSS, NIST, HIPAA or others. Moderate level of experience with security tools and techniques to cover SANS Top 25, OWASP or others. Workplace type: Hybrid Working About NTT DATA NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo. Equal Opportunity Employer NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today. Show more Show less

You will be responsible for performing automated testing of running applications and static code (SAST, DAST). Additionally, you will conduct manual application penetration tests on various platforms such as web applications, internal applications, APIs, internal and external networks, and mobile applications to identify and exploit vulnerabilities. Experience in mobile application testing, Web application pen testing, application architecture, and business logic analysis would be advantageous. You will need to utilize application tools like AppScan, NetsSparker, Acunetix, Checkmarx, Veracode, BurpSuite, OWASP ZAP, and Kali Linux to carry out security tests and should be capable of explaining concepts like IDOR, Second Order SQL Injection, CSRF Vulnerability, Root cause, and Remediation. The mandatory technical and functional skills required for this role include a minimum of three (3) years of recent experience with application tools for security testing, manual penetration testing, and code review against web apps, mobile apps, and APIs. You should also have experience in working with both technical and non-technical audiences to report results and lead remediation conversations. It is preferred that you have at least one year of experience in developing web applications and/or APIs. Being able to adapt to new tools and technologies to address client project requirements efficiently is a key aspect of this role. While having major ethical hacking certifications like GWAPT, CREST, OSCP, OSWE, or OSWA is not mandatory, it would be considered advantageous.,

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. Renowned for technical excellence and leading innovations, NTT DATA is known for making a difference to clients and society. The workplace embraces diversity and inclusion, providing a space where you can grow, belong, and thrive. As a Senior Associate Security Consultant at NTT DATA, you will be responsible for developing expertise in your area of specialization. Your role involves translating clients" cybersecurity requirements, customizing and implementing security solutions into specific systems, applications, and product designs. You will identify and develop security solutions for clients using company products, outsourced technology solutions, and technical tools. Consultation with clients regarding secure product configuration, deployment, and security patches to minimize security vulnerabilities is a key aspect of the role. Your responsibilities will include conducting security assessments, vulnerability scans, and penetration tests to identify weaknesses in client systems. Analyzing security data, logs, and reports to detect and investigate security incidents or anomalies. Additionally, you will be preparing and maintaining documentation, collaborating with senior consultants to provide advice to clients on security best practices, and staying updated on the latest cybersecurity threats and industry best practices. Key Requirements: - Strong interest in cybersecurity with a desire to learn and grow in the field. - Knowledge of basic cybersecurity concepts, principles, and best practices. - Familiarity with common security tools and technologies is advantageous. - Excellent analytical and problem-solving skills. - Effective communication skills, both written and verbal. - Ability to work collaboratively in a team environment. - Eagerness to stay up to date with the evolving cybersecurity landscape. Academic Qualifications and Certifications: - Bachelor's degree or equivalent in Information Technology, Computer Science, Engineering, or related fields. - Industry relevant certifications such as CISSP, CISM, CEH, GSEC, or CompTIA Security+ are essential. Required Experience: - Moderate level of demonstrable experience in the Information Technology Security Industry or a relevant role within a related environment. - Experience with security architecture design principles and industry compliance standards such as ISO 27000, PCI:DSS, NIST, HIPAA, or others. - Familiarity with security tools and techniques to cover SANS Top 25, OWASP, or others. Workplace Type: Hybrid Working About NTT DATA: NTT DATA is a trusted global innovator of business and technology services, with a commitment to helping clients innovate, optimize, and transform for long-term success. The company invests over $3.6 billion annually in R&D to assist organizations and society in moving confidently into the digital future. NTT DATA serves 75% of the Fortune Global 100, with diverse experts in more than 50 countries and a robust partner ecosystem. Services include business and technology consulting, data and artificial intelligence, industry solutions, development, implementation, and management of applications, infrastructure, and connectivity. NTT DATA is a leading provider of digital and AI infrastructure globally, part of NTT Group, and headquartered in Tokyo. Equal Opportunity Employer,

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion its a place where you can grow, belong and thrive. Your day at NTT DATA The Senior Associate Security Consultant is responsible for developing expertise in their area of specialization. This role is responsible for translating clients cybersecurity requirements and customizing and implementing security solutions into specific systems, applications and product designs. This role identifies and develops the security solutions for clients using company products, outsourced technology solutions and technical tools. This role consults with clients regarding secure product configuration, deployment, and security patches to minimize security vulnerabilities. In addition, this role provides comprehensive scanning, penetration testing, vulnerability assessments, monitoring services and source code analysis and delivers detailed results to clients, as well as guides and supports clients in the development and implementation of product security controls. What You&aposll Be Doing Key Responsibilities: Assists in conducting security assessments, vulnerability scans, and penetration tests to identify weaknesses in client systems. Analyzes security data, logs, and reports to detect and investigate security incidents or anomalies. Prepares and maintains documentation, including security assessment reports, findings, and recommendations. Collaborates with senior consultants to provide advice and support to clients on security best practices and risk mitigation strategies. Learns and uses various security tools and technologies for assessments and monitoring. Stays updated on the latest cybersecurity threats, vulnerabilities, and industry best practices. Assists in evaluating client systems for compliance with industry standards (e.g., ISO 27001, NIST) and regulatory requirements. Communicates effectively with clients to understand their security needs and concerns. Participates in training programs and certifications to develop expertise in cybersecurity. Knowledge and Attributes: Strong interest in cybersecurity and a desire to learn and grow in the field. Knowledge of basic cybersecurity concepts, principles, and best practices. Familiarity with common security tools and technologies is a plus. Excellent analytical and problem-solving skills. Effective communication skills, both written and verbal. Ability to work collaboratively in a team environment. Eagerness to stay up to date with the evolving cybersecurity landscape. Academic Qualifications and Certifications: Bachelor&aposs degree or equivalent in Information Technology or Computer Science or Engineering or related field. Industry relevant certifications such as CISSP, CISM, CEH, GSEC or CompTIA Security+ essential. Required Experience: Moderate level of demonstrable experience in the Information Technology Security Industry or relevant experience in similar role within a related environment. Moderate level of experience with security architecture design principles. Moderate level of experience with industry compliance and standards such as ISO 27000, PCI:DSS, NIST, HIPAA or others. Moderate level of experience with security tools and techniques to cover SANS Top 25, OWASP or others. Workplace type: Hybrid Working About NTT DATA NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo. Equal Opportunity Employer NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today. Show more Show less

As a Security Verification professional with Job Id 56781 based in Mumbai, India, you will be responsible for leading SecArch deep dives with the requestor of the assessment. Your key duties will include conducting assessments and providing technology risk/requirements to the requestor, covering areas such as Authentication, Authorization, Auditing, Application Security, Secure data transport and storage. It will also be your responsibility to periodically review security reference architecture and conduct updates/enhancements, as well as participate in various Operational and Technology Risk governance processes. Additionally, you will assist in identifying new areas and opportunities for technology investment within the firm. To excel in this role, you must possess excellent communication skills in written, oral, and presentation formats, along with active listening abilities. Your ability to influence through factual reasoning, manage time effectively by handling multiple concurrent assessments, and strong follow-up and tracking skills will be crucial. You should have a strong focus on delivery, especially when faced with short timelines and increased involvement from senior management. Your capacity to adjust communication of technology risks versus business risks based on the audience will be highly valued. In terms of Security Architecture skills, you are required to have in-depth knowledge of application security and basic knowledge of network and platform security vulnerabilities. You should be able to explain these vulnerabilities to developers, have experience in conducting Information Security, IT Security, and Audit assessments, as well as reviewing technical designs and functional requirements to identify areas of security weakness. Furthermore, you must have a working experience in various application/network security domains such as Authentication, Entitlements and identity management, Data protection, App Security, Cryptography, and more. Moreover, familiarity with programming and scripting languages like Java, JavaScript, C#, C/C++, Perl, Python, Ruby is essential for this role. Understanding frameworks, protocols, and subsystems like J2EE, .NET, Spring, RPC, SOAP, and more, as well as database design and programming experience, will be advantageous. Experience in liaising with 3rd Party Entities, conducting and reviewing penetration tests, vulnerability assessments, and knowledge of geographic regulations impacting security assessments will be beneficial. Previous experience in Financial Services and industry qualifications like CISSP are preferred. In summary, as a Security Verification professional, you will play a critical role in ensuring the security and integrity of technology systems within the organization. Your expertise in security architecture, communication skills, and ability to manage multiple assessments will be instrumental in safeguarding the firm against potential risks and vulnerabilities.,

As an R&D engineer in the Common Software Foundation team at Nokia, you will be responsible for contributing to the delivery of secure open-source components in various PaaS environments such as NCS, AWS, Azure, and GCP. Your role will involve enhancing security by analyzing and prioritizing vulnerabilities in Rocky and Redhat OS, conducting scans, and implementing appropriate remediation measures. You will be actively involved in the development and testing of Rocky OS, utilizing your expertise in microservices, containers, and CI/CD DevOps practices. Your proficiency in secure protocols, encryption methodologies, and vulnerability assessment tools will play a crucial role in strengthening system security. Additionally, you will be contributing to SBOM generation, security design, and threat analysis to ensure compliance with industry standards. The ideal candidate for this position should hold an Engineering Graduate or equivalent degree with 3-8 years of experience in Development and Testing. You should possess expertise in Rocky and Redhat OS, as well as proficiency in programming languages such as Python, Go, C++, or Java. Hands-on experience with Microservices, Containers (Docker, Kubernetes, Helm), and CI/CD DevOps practices is essential for this role. Moreover, you should be skilled in secure protocols (TLS, SSH), encryption methodologies, and security hardening practices. Experience in vulnerability scanning, penetration tests, and the use of tools like Anchore, Tenable, and Nmap will be beneficial for this position. It would be advantageous if you also had an understanding of Zero Trust architecture, compliance frameworks (NIST, CIS, ISO 27001), and experience with AI-driven security analytics tools. Familiarity with tools like Terraform, Ansible, and cloud-native security practices across AWS, Azure, and GCP, as well as on Tomcat, Nginx, and Ingress Controller, would be a plus. Join Nokia to be a part of a team that is committed to innovation and technology leadership, and be a driving force in building capabilities for a more productive, sustainable, and inclusive world. Enjoy continuous learning opportunities, well-being programs, and a supportive environment where diversity and inclusion thrive.,

You should have experience in performing various security assessments and providing effective hardening and mitigation strategies. Your expertise should include conducting network and web-based application penetration tests, physical security assessments, logical security audits, and hands-on technical security evaluations and implementations. Additionally, you should have subject matter expertise in areas such as database security, wireless security, or application and development security. It is important to be skilled in conducting wireless security assessments, social engineering assessments, and mobile application assessments. You should be familiar with penetration testing tools, network and application security scanners, as well as standards like OWASP Top Ten Security Standard. Knowledge of Linux and Windows Network platforms is essential. Certification in CEH or any recognized cyber security certifications is required. Willingness to travel to client onsite locations is expected. The ideal candidate will have 1 to 3 years of experience in cybersecurity and hold a degree in B.Sc, B.Tech, M.Tech, MCA, or M.Sc-IT with a specialization in CS, IT, Cyber Security, or Cyber Forensics. Candidates with experience in any of the mentioned areas are encouraged to apply. This is a full-time position with a day shift schedule and a hybrid remote work location in Thiruvananthapuram, Kerala. The remuneration offered will be competitive based on industry standards.,

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. Renowned for technical excellence, leading innovations, and making a difference to clients and society, the workplace at NTT DATA embraces diversity and inclusion, providing a space where you can grow, belong, and thrive. Your day at NTT DATA As a Senior Associate Security Consultant, you will be tasked with developing expertise in your area of specialization. Your responsibilities include translating clients" cybersecurity requirements, customizing and implementing security solutions into specific systems, applications, and product designs. You will identify and develop security solutions for clients using company products, outsourced technology solutions, and technical tools. Additionally, you will consult with clients on secure product configuration, deployment, and security patches to minimize vulnerabilities. Your role will involve providing comprehensive scanning, penetration testing, vulnerability assessments, monitoring services, and source code analysis. You will deliver detailed results to clients and guide them in developing and implementing product security controls. What you'll be doing Key Responsibilities: - Conduct security assessments, vulnerability scans, and penetration tests to identify weaknesses in client systems. - Analyze security data, logs, and reports to detect and investigate security incidents or anomalies. - Prepare and maintain documentation, including security assessment reports, findings, and recommendations. - Collaborate with senior consultants to provide advice and support to clients on security best practices and risk mitigation strategies. - Learn and utilize various security tools and technologies for assessments and monitoring. - Stay updated on the latest cybersecurity threats, vulnerabilities, and industry best practices. - Evaluate client systems for compliance with industry standards (e.g., ISO 27001, NIST) and regulatory requirements. - Communicate effectively with clients to understand their security needs and concerns. - Participate in training programs and certifications to develop expertise in cybersecurity. Knowledge and Attributes: - Strong interest in cybersecurity and a desire to learn and grow in the field. - Knowledge of basic cybersecurity concepts, principles, and best practices. - Familiarity with common security tools and technologies is a plus. - Excellent analytical and problem-solving skills. - Effective communication skills, both written and verbal. - Ability to work collaboratively in a team environment. - Eagerness to stay up to date with the evolving cybersecurity landscape. Academic Qualifications and Certifications: - Bachelor's degree or equivalent in Information Technology, Computer Science, Engineering, or related field. - Industry-relevant certifications such as CISSP, CISM, CEH, GSEC, or CompTIA Security+ essential. Required Experience: - Moderate level of demonstrable experience in the Information Technology Security Industry or relevant experience in a similar role within a related environment. - Moderate level of experience with security architecture design principles. - Moderate level of experience with industry compliance and standards such as ISO 27000, PCI:DSS, NIST, HIPAA, or others. - Moderate level of experience with security tools and techniques to cover SANS Top 25, OWASP, or others. Workplace type: Hybrid Working About NTT DATA NTT DATA is a $30+ billion trusted global innovator of business and technology services, serving 75% of the Fortune Global 100. Committed to helping clients innovate, optimize, and transform for long-term success, NTT DATA invests over $3.6 billion annually in R&D to support organizations and society in confidently and sustainably navigating the digital future. As a Global Top Employer, NTT DATA boasts diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Services include business and technology consulting, data and artificial intelligence, industry solutions, as well as development, implementation, and management of applications, infrastructure, and connectivity. NTT DATA is also one of the leading providers of digital and AI infrastructure globally, part of the NTT Group, and headquartered in Tokyo. Equal Opportunity Employer,

As a Senior Associate Security Consultant at NTT DATA, you will be responsible for developing expertise in your area of specialization and translating clients" cybersecurity requirements into customized and implemented security solutions. Your role will involve identifying and developing security solutions for clients using company products, outsourced technology solutions, and technical tools. You will consult with clients on secure product configuration, deployment, and security patches to minimize security vulnerabilities. Additionally, you will provide comprehensive scanning, penetration testing, vulnerability assessments, monitoring services, and source code analysis, delivering detailed results to clients and supporting them in the development and implementation of product security controls. Key Responsibilities: - Assist in conducting security assessments, vulnerability scans, and penetration tests to identify weaknesses in client systems. - Analyze security data, logs, and reports to detect and investigate security incidents or anomalies. - Prepare and maintain documentation, including security assessment reports, findings, and recommendations. - Collaborate with senior consultants to provide advice and support to clients on security best practices and risk mitigation strategies. - Learn and utilize various security tools and technologies for assessments and monitoring. - Stay updated on the latest cybersecurity threats, vulnerabilities, and industry best practices. - Evaluate client systems for compliance with industry standards (e.g., ISO 27001, NIST) and regulatory requirements. - Communicate effectively with clients to understand their security needs and concerns. - Participate in training programs and certifications to develop expertise in cybersecurity. Knowledge and Attributes: - Strong interest in cybersecurity and a desire to learn and grow in the field. - Knowledge of basic cybersecurity concepts, principles, and best practices. - Familiarity with common security tools and technologies is a plus. - Excellent analytical and problem-solving skills. - Effective communication skills, both written and verbal. - Ability to work collaboratively in a team environment. - Eagerness to stay up to date with the evolving cybersecurity landscape. Academic Qualifications and Certifications: - Bachelor's degree or equivalent in Information Technology, Computer Science, Engineering, or related field. - Industry relevant certifications such as CISSP, CISM, CEH, GSEC, or CompTIA Security+ are essential. Required Experience: - Moderate level of demonstrable experience in the Information Technology Security Industry or relevant experience in a similar role within a related environment. - Moderate level of experience with security architecture design principles. - Moderate level of experience with industry compliance and standards such as ISO 27000, PCI:DSS, NIST, HIPAA, or others. - Moderate level of experience with security tools and techniques to cover SANS Top 25, OWASP, or others. Workplace Type: - Hybrid Working Join NTT DATA, a trusted global innovator of business and technology services committed to helping clients innovate, optimize, and transform for long-term success. With a diverse team of experts in more than 50 countries and a robust partner ecosystem, we offer services including business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation, and management of applications, infrastructure, and connectivity. As a Global Top Employer, we invest over $3.6 billion each year in R&D to move organizations and society confidently into the digital future. NTT DATA is part of NTT Group and headquartered in Tokyo, and we are proud to be an Equal Opportunity Employer.,

OPERATIONAL TITLE (ENGLISH): Senior information Security Analyst - Security Policy and Architecture REPORTING LOCATION: Bangalore, IN WORKING LOCATION: Bangalore, IN SUMMARY OF POSITION AND OBJECTIVES: The Information Security Consultant/Architect plays a pivotal role in safeguarding the technological infrastructure and assets of Eurofins through meticulous evaluation, integration, and enhancement of security measures, evaluation of intricate IT technologies to ensure alignment with stringent security standards before their approval by the Technology Council, and contribution to the formulation and refinement of security policies, ensuring their relevance and effectiveness in the dynamic landscape of cybersecurity. POSITION & OBJECTIVES : GSC Security Policy and Architecture Advisory is part of GSC Security Support Office pilar, combining the Security Policy and Architecture Advisory, Regional Security Support and Security Certifications Support crews. As part of his significant role in safeguarding the IT infrastructure and assets, Information Security Consultant: evaluates complex IT technologies from security standpoint before they are approved by the Technology Council; contributes to newly created and updated security policies; provides consultancy to other IT and business crews regarding the policies and security recommendations; contributes to technical integration scenarios, ensuring security in ongoing and planned projects; engages into strategic initiatives aimed at enhancing Eurofins overall security posture, ensuring resilience against evolving threats and vulnerabilities (Information Security Architect); provides internal consultancies for other crew members (Information Security Architect); QUALIFICATIONS AND EXPERIENCE REQUIRED: Experience: 7-10+ years of experience in information security, preferably in the security architecture area; experience in one or more areas such as: managing complex IT environment utilizing directory services; designing/managing/protecting complex network environments; design and/or management of cloud-based services; identifying the requirements, architecting, deploying, and managing security tools , such as vulnerability management, identity management, PKI, log management, MFA, penetration tests, automate code analysis, antimalware solutions; acting as security SME (Key Word) in IT projects; delivering security policies, standards and guidelines.