🍪
Privacy Notice
Cybersecurity Consultant (6 months contract)
Riyadh SPLD – SPLD - Tech & Engineering / Contract / On-site
Infinite pl, is a digital led tech firm driven to become a digital logistics pioneer by harnessing the power of people, data, and platforms. We are enabled through inhouse, external, network, & other investment capabilities which we utilize to orchestrate & build innovative platforms that tackle complex problems within logistics & adjacent sectors. Infinite pl’s mission is nothing short of a logistics revolution! We're here to enrich the experiences of governments, businesses, and residents around the world through cutting-edge digital solutions. "We're not just players; we're game-changers." Infinite pl ♾️ - where innovation meets logistics, and the journey is Infinitely boundless! Let's disrupt logistics together and explore infinite opportunities!
A Cyber Security Consultant contractor is responsible for planning, implementing, and monitoring an organization's security posture and work to ensure that the confidentiality, integrity, and availability of information are protected from unauthorized access or disclosure. Responsible for identifying weaknesses in information systems by simulating real-world attacks. The purpose is to assess and evaluate the robustness of security controls, discover vulnerabilities, and ensure that data protections are effective. By anticipating and mimicking the tactics of potential hackers, the Penetration Tester provides invaluable insights into the organization's security posture and drives continuous enhancement of security protocols.
Responsibilities:
• Safeguards information system assets by identifying and solving potential and actual security problems. • Recognizes problems by identifying abnormalities; reporting violations. • Implements security improvements by assessing current situation; evaluating trends; anticipating requirements. • Determines security violations and inefficiencies by conducting periodic audits. • Maintains quality service by following organization standards. • Contributes to team effort by accomplishing related results as needed. • Conduct through penetration testing on web applications, mobile, API and infrastructure to identify vulnerabilities. • Utilize various penetration testing and vulnerability assessment tools and methodologies to simulate the attacks. • Recommend solutions and mitigations to prevent the discovered vulnerabilities and communicate with IT team to close them. • Preparing detailed reports on findings. • Keep up with latest security trends, tools and technologies.
Requirements:
• Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM-specific training and certification. • Experience with programming/scripting languages such as Python, JavaScript, or Ruby. • Knowledge of network security and operating systems. • Familiarity with cloud environments and container technologies. • Bachelor's degree in Computer Science, Information Security, or a related field. • Industry certifications such as Certified Ethical Hacker • (CEH), Offensive Security Certified Professional • (OSCP), or GIAC Web Application Penetration Tester (GWAPT). • Strong understanding of web application technologies and protocols (HTTP/HTTPS, HTML, JavaScript, etc.). • Proficiency in using penetration testing tools like Burp Suite, OWASP ZAP, Metasploit, SQLMap, etc. • Experience with known exploits and their mitigation. • Ability to analyze and report on penetration testing outcomes effectively. • Excellent problem-solving and analytical skills. • Strong communication skills for collaboration with cross-functional teams. • Experience with agile development methodologies and working within a cross functional team environment. • Strong problem-solving and analytical skills. •A key relationship builder that drives mutual value for their shareholders and customers alike.
