Penetration Tester: OSCA 271137

Creates test cases using in-depth technical analysis of risks and typical vulnerabilities, and produces test scripts, materials and packs to test new and existing software or services. Plans, coordinates and conducts cyber threat emulation activities in support of certification, accreditation and operational priorities to verify deficiencies in technical security controls.

Skill level 1: Bachelor degree or higher, or at least 5 years of relevant experience

• Develops and executes penetration testing methodologies and strategies to identify weaknesses in security controls
• Creates test cases using in-depth technical analysis of risks and typical vulnerabilities
• Produces test scripts, materials and packs to test new and existing software or services for vulnerabilities
• Plans, coordinates and conducts cyber threat emulation activities to verify deficiencies in technical security controls, and provides recommendations for remediation
• Identifies vulnerability exploitations and potential attack vectors into a system, and analyses vulnerability scan results to assess security loopholes and threats
• May conduct phishing attacks or other tests to evaluate the effectiveness of security awareness training