Penetration Tester - Ecobank

Information Security Assurance

• Perform penetration testing and reporting of new projects defined by the Group or affiliates
• Perform penetration testing and reporting of new systems or existing systems that have experienced major changes 
• Perform penetration testing activities against critical networks, applications and systems both for internal and external assets of the Group
• Participate in the development and testing of customized penetration testing tools and exploits in support of red team engagements.
• Develop vulnerability intelligence reports, summaries and bulletins that articulate the associated risks to management and stakeholders.

JOB CONTEXT

• Information Security Penetration Testing
• Exploitable Vulnerability Detection and Reporting
• Overseeing remediation of Vulnerabilities

JOB DIMENSION

Key Performance Indicators/ Performance Goals:

• Average Number of information security-related exploits reported per year
• Percentage downtime due to Security incidents.
• Cost savings by using internal penetration test rather than outsourcing
• Security breach detection time/security failure repair time.
• Number of security breaches due to existing exploitable vulnerabilities
• A number of continuous improvement initiatives are recommended per year.

JOB SKILLS/EXPERIENCE

• Perform web application scanning and use various tools to discover vulnerabilities such as cross-site scripting, SQL injection, cross-site request forgery, remote code execution
• Perform segmentation testing to validate the integrity of segmentation and network boundary controls
• Knowledge of OWASP standards and assessing web applications and software development again the OWASP Top 10
• Working knowledge of malware analysis, pivoting, source code reviewing, exploit writing 
• Experience and knowledge with industry tools, security threats, attacks & countermeasures, sources of industry information and standards
• Configuration review of information technology systems including network devices, applications, databases, virtual environments
• Knowledge of encryption algorithms, techniques, deployments
• Develop and test scripts
• Bachelor of Science in computing or any related fields
• Good document writing skills
• Ability to work in a Multicultural Environment
• Highly attentive to detail
• Friendly and approachable
• Resourceful
• Ability to work well under pressure