Match score not available

SS - Red Team Security Tester - Consultant - Remote/Onsite KSA (Top Class team)

Remote:

Full Remote

Work from:

South Sudan

Offer summary

Qualifications:

OSCP certification or higher, Experience in Bug Hunting and Red Teaming.

Key responsabilities:

Conducting advanced attack simulations
Following a clear framework and methodology
Submitting daily summaries and detailed reports on simulations

SSS Grameen Services Startup https://www.sssgrameen.in/

See more SSS Grameen Services offers

Job description

This is a remote position.

Client: SS

Ref/Code: XXX

The Client requires the consultant/service provider to conduct an exercise and simulate cyber-attacks to help it better understand and improve its cyber security posture by understanding the operational impact of potential threats.

• Advanced Attack Simulation Service (Red Teaming) includes the following domains and their sub-domains

• The objectives of the simulation are to obtain the following:

--- obtain a username and password or gain access to a system Internal or the ability to modify the portal or obtaining a system administrator account (AD) or accessing the user deployment server or accessing the powers of the system.. (AD ) or obtain an administrator account

--- The supplier must follow a clear framework and methodology eg Saudi Central Bank methodology for advanced attack simulation.

--- In the event of access to one of the endpoints, the supplier must inform the authority team of this.

--- The supplier must comply with informing the authority team in the event of damage to technical resources when simulating advanced attacks.

--- The supplier must simulate advanced attacks to verify that the loopholes are closed discovered after confirmation by the authority team within the agreed working days

--- The supplier must start simulating advanced attacks within 5 working days from the date of receiving the request from the authority

--- The supplier must commit to submitting the results of simulation of advanced attacks within a minimum of 10 working days from the date of the test.

--- The supplier must submit a daily summary of the simulation work.

--- The supplier must submit a detailed report on simulating advanced attacks, including the steps taken, screenshots, and recommendations that raise the level of cyber security.

Requirements

The final report must also include, but not be limited to:

• (Executive Summary) / (Scope) / • (Risk Rating) / (Statistics) / • (Key Weaknesses Identified) / • Brief results / • (methodology) / • (Findings and Remediation) / • Results / • Observation with trusted remediation

Benefits

Note: The consultant/service provider must start simulating advanced attacks within 5 working days from the date of receiving the request from the authority

- onsite/remote

- KSA

- critical infrastructure client

- OSCP or above

- Bug Hunters or top class Red Teaming Expertise