DCG

Cyber Security Consultant

Brak informacji o wynagrodzeniu

NieokreśloneOn-site·GdyniaFull-time

#468965·Dodano 7 dni temu·3

Źródło: DCG

Aplikuj teraz

Tech Stack / Keywords

QualysTenable NessusRapid7OpenVASCVSSCVENVDLinux PowerShellTCP/IP

Podsumowanie oferty

The Cyber Security Consultant will assess and investigate vulnerabilities, support prioritization and remediation, and analyze security risks involving AI-enabled applications, LLMs, and AI agents. The work includes security investigations using tools such as Qualys, Tenable Nessus, Rapid7, and OpenVAS.

Wymagania

Understand cybersecurity principles and the common threat landscape.
Explain security vulnerabilities and assess their technical and business impact.
Be familiar with vulnerability severity classification and prioritization methodologies.
Know CVSS and how it is applied in vulnerability risk assessment.
Understand vulnerability remediation processes and risk reduction practices.
Have hands-on experience with vulnerability assessment tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar.
Understand vulnerability scanner capabilities, limitations, and common use cases.
Be able to investigate and research vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins.
Know how to prioritize vulnerabilities based on severity, exploitability, asset criticality, and business impact.
Have a basic understanding of security risks related to AI systems, AI agents, LLMs, and AI-enabled applications.
Be aware of AI-related vulnerabilities, including prompt injection, data leakage, excessive permissions, insecure integrations, and autonomous agent risks.
Understand networking concepts including TCP/IP, DNS, DHCP, routing, firewalls, proxies, and network segmentation.
Be able to troubleshoot basic network connectivity and communication issues.
Have a good understanding of Microsoft Windows and Linux operating systems.
Be familiar with system administration fundamentals and security best practices.
Be able to perform basic administrative tasks in Windows and Linux environments.
Know common Linux commands, including grep, find, ps, netstat/ss, chmod, chown, journalctl, and systemctl.
Have basic PowerShell knowledge for administrative and information-gathering activities.
Be able to analyze logs and collect troubleshooting information from operating systems.
Have a very good command of English, spoken and written.

Nice to have:

Experience working in security operations, vulnerability management, risk management, or infrastructure support teams.
Familiarity with security frameworks and standards such as NIST, CIS Controls, ISO 27001, or OWASP.
Security certifications such as CompTIA Security+, CompTIA CySA+, SC-900, AZ-500, or similar.

Obowiązki

Perform vulnerability assessments using approved security scanning tools.
Analyze and investigate identified security vulnerabilities.
Research vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins.
Support vulnerability prioritization based on severity, exploitability, asset criticality, and business impact.
Contribute to vulnerability remediation and risk reduction activities.
Analyze operating system and security logs for troubleshooting purposes.
Collect and evaluate technical information from Windows and Linux environments.
Support basic security and infrastructure investigations involving network, operating system, and security-related issues.
Identify and assess security risks related to AI-enabled applications, LLMs, and AI agents.

Benefity

Private medical care.
Co-financing for a sports card.
Ongoing support from a dedicated consultant.
Employee referral program.

Opieka zdrowotna

Karta sportowa

DCG

453 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz