Senior/Expert Penetration Engineer

Work Set-Up: On-Site
Work Location: Pasay
Working Days: 6 Days
Work Schedule: Morning-Mid Shift (8 am-12nn start)
Job Description Use security tools to scan websites/api/servers for vulnerabilities, and manually confirm vulnerabilities that cannot be reproduced with tools.Analyze the exploited vulnerabilities and give suggestions for repairing them.Emergency response to web security incidents and recurring attack routines.Qualifications Proficiency in at least 2 programming languages.Have their own set of tools and methods for early information collection.Proficiency in using burpsuite, nmap, sqlmap, and other tools to scan and exploit vulnerabilities.Familiar with the HTTP protocol, HTTP header, and able to explain its meaning. Familiar with the DNS protocol and proficient in using tools to analyze the DNS resolution process.Familiar with common web vulnerabilities, such as SQL injection, XSS attack, command injection, CSRF attack, upload vulnerability, parsing vulnerability, etc.Familiar with popular suites or frameworks commonly used in front-end development, such as webpack, vue.js, react.js, ant, gulp, etc.Those with web full stack development experience or DevOps experience can be interviewed for extra points.Bonus points for experience in static reverse engineering, dynamic debugging, and an in-depth understanding of PE structure.Bonus points for deep experience in Windows domain penetration.
#J-18808-Ljbffr