Cyber Security Consultant
Коротко
Performs vulnerability assessments, analyzes and investigates security vulnerabilities, supports prioritization and remediation, and assesses security risks · Needs: Hands-on experience with vulnerability assessment tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar; knowledge of CVSS; ability to investigate
Описание от работодателя
As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:
Cyber Security Consultant
Offer:
Private medical care
Co-financing for the sports card
Constant support of dedicated consultant
Employee referral program
Daily tasks:
- Perform vulnerability assessments using approved security scanning tools
- Analyze and investigate identified security vulnerabilities
- Research vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins
- Support vulnerability prioritization based on severity, exploitability, asset criticality, and business impact
- Contribute to vulnerability remediation and risk reduction activities
- Analyze operating system and security logs for troubleshooting purposes
- Collect and evaluate technical information from Windows and Linux environments
- Support basic security and infrastructure investigations involving network, operating system, and security-related issues
- Identify and assess security risks related to AI-enabled applications, LLMs, and AI agents
Understanding of cybersecurity principles and common threat landscape
Ability to explain security vulnerabilities and assess their technical and business impact
Familiarity with vulnerability severity classification and prioritization methodologies
Knowledge of CVSS and its application in vulnerability risk assessment
Understanding of vulnerability remediation processes and risk reduction practices
Hands-on experience with vulnerability assessment tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar
Understanding of vulnerability scanner capabilities, limitations, and common use cases
Ability to investigate and research vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins
Knowledge of vulnerability prioritization based on severity, exploitability, asset criticality, and business impact
Basic understanding of security risks related to AI systems, AI agents, LLMs, and AI-enabled applications
Awareness of AI-related vulnerabilities including prompt injection, data leakage, excessive permissions, insecure integrations, and autonomous agent risks
Understanding of networking concepts including TCP/IP, DNS, DHCP, routing, firewalls, proxies, and network segmentation
Ability to troubleshoot basic network connectivity and communication issues
Good understanding of Microsoft Windows and Linux operating systems
Familiarity with system administration fundamentals and security best practices
Ability to perform basic administrative tasks in Windows and Linux environments
Knowledge of common Linux commands including grep, find, ps, netstat/ss, chmod, chown, journalctl, and systemctl
Basic PowerShell knowledge for administrative and information-gathering activities
Ability to analyze logs and collect troubleshooting information from operating systems
Very good command of English, both spoken and written
Nice to have:
Experience working in security operations, vulnerability management, risk management, or infrastructure support teams
Familiarity with security frameworks and standards such as NIST, CIS Controls, ISO 27001, or OWASP
Security certifications such as CompTIA Security+, CompTIA CySA+, SC-900, AZ-500, or similar
Must have: Security, Windows, Linux, AI, Cybersecurity, Nessus, TCP, DNS, Microsoft Windows, PowerShell