Penetration Test and Risk Assessment Team Leader

Job Description:

White Hat, part of the EPAM group, is a leading cyber intelligence and offensive security company that leverages an attacker’s perspective to shape innovative, proactive defense strategies. Founded in 2013, White Hat delivers strategic and technical expertise, empowering global enterprise clients to transform from reactive defenses to resilient security postures. Cyber threats are imminent and always evolving. Our elite team of cyber analysts and ethical hackers has successfully resolved and thwarted some of the world’s most complex cyber incidents for governments and leading organizations across finance, healthcare, critical infrastructure, technology, telecom and other key sectors.

As the Penetration Test and Risk Assessment Team Leader, you'll spearhead a dynamic team of security and technology experts. In our fast-paced, client-focused environment, you will play a pivotal role in providing top-tier security audit services, conducting rigorous penetration tests, and identifying potential system vulnerabilities. By expertly managing ongoing projects and aligning them with organizational goals and client needs, you'll deliver exceptional quality service, exceed ambitious targets and drive the professional growth of your team. This is your chance to not only apply your leadership skills and technical prowess but to inspire a team to shape the future of security services.

Responsibilities:

1. Plan and execute penetration testing projects and ethical hacking procedures using tools like Nmap, Wireshark, Metasploit, Nessus, Burp Suite, etc.

2. Conduct regular risk assessments and security audits with tools such as OpenVAS, Nexpose Community, and Security Risk Assessment Toolkit.

3. Manage the team to develop security testing methodologies and improve existing security controls.

4. Track routine tasks, project deliverables, and provide ongoing project status updates.

Requirements:

1. Minimum 3 years of hands-on experience in penetration testing and risk assessments.

2. In-depth knowledge of risk assessment tools and penetration testing tools and techniques, including experience with Nessus, Wireshark, Nmap, Metasploit, etc.

3. Knowledge of programming languages such as Python, Java, Perl, or Shell for script writing.

4. Experience in working with network protocols, firewalls and routers – Advantage.

5. Familiarity with cloud security concepts and technologies – Advantage.

6. Experience in UNIX/Linux and Windows administration – Advantage.

7. Proven team leadership experience is a plus.

8. Strong communication skills.

9. Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or a related field – Advantage.