Представляем пакет без комиссии за найм!
Размещайте вакансии
Нанимайте без комиссий
Information Security Specialist - 22097 Outstaffing
Языки программирования/технологии
§ Питон
§ Баш
§ Php
§ JavaScript
§ Джава
§ HTML
§ Рубин
§ С\С++
§ Bootstrap4
§ СИЭМ
§ Техническая документация/Отчеты о тестировании на проникновение/Предложения
§ Обратный инжиниринг
СУБД
§ Мой SQL
§ ПостгресSQL
§ SQLite
СУБД
§ Phpmyadmin
§ Монгодб
Инструменты разработки
§ Доступный (базовый)
§ AWS/Кубернет
§ Докер
§ Дженкинс
§ Гитлаб
§ Гит
Среды виртуализации
§ VMWare
§ Виртуальная коробка
Операционные системы
§ Microsoft Windows 95/98/2000/XP/2003 Server/Vista/7/8/10
§ Кали Линукс
§ Убунту
Приложения/веб-серверы
§ Нгинкс
§ Php-fpm
§ Кот
§ ИИС
§ Апачи
§ Редис
§ Активный каталог
§ DNS
§ DHCP
§ SNMP
§ малый и средний бизнес
Методологии
§ ОВАСП
§ НИСТ
§ ИСАКА
Инструменты тестирования
§ Nкарта
§ Никто
§ Берп Люкс
§ ОВАСП ЗАП
§ Несс
§ Wireshark
§ Мальтего
§ SQL-карта
§ Гобастер
§ Метасплойт
§ Облачная вспышка
§ Скользить
§ Гидра
§ WPSскан
Аппаратное обеспечение
§ Сетевые технологии
§ Различное технологическое устройство
Evaluating the security posture of the client’s website and network. Improve a company's corporate vulnerability assessments. Finding weak spots in an organization's security plan. Prevent those weaknesses from being exploited by attackers.
§ Analyze the system and prepare scope of work
§ Gathering information about the site, mapping, OSINT
§ Vulnerabilities search with automated scanners.
§ Fuzzing
§ Prepare a detailed report on found vulnerabilities including executive summary, risk level of each vulnerability and recommendations on how to fix them.
Nmap, Sniper, Nikto, Burp Suite, Nessus, Maltego, Hydra, the Metasploit Framework, Searchsploit, Dirb, Gobuster, Wireshark, Sqlmap
Part-time employment as Security Engineer for ensuring the security of various web sites. Advising and assistance in implementing security measures
§ Information gathering
§ Threat modeling
§ Identity and access management
§ Test data protection, verification of SSL certificates, disabling insecure cipher suites, testing cookies.
§ Testing SQL, command injections, cross-site scripting
§ Web app code review
§ Communication with client's security engineer
§ Generating a report with executive summary, risk level of each vulnerability and recommendations on how to fix them.
- Design and implementation with multiple layers of security controls
- Developing back-end and front-end
- Creating a secure access between API Gateway and backend services
- Communication with customer, participation in meetings
Linux, Apache2, PHP, JavaScript, web (HTML + CSS + Bootstrap4).