Security Consultant

3 years exp

**Roles & Responsibilities**

**1.1 Responsibilities**:

- Research new attacking techniques and cutting edge security topics.
- Develop/Write exploit or use public exploit to gain access to the network.
- Document technical issues and findings identified during the security assessment.
- Deliver professional onsite and remote briefings to clients based on results of security assessments.
- Deliver presentation and training to both technical and non-technical audiences.
- Assist clients with questions regarding vulnerabilities and the remediation efforts involved in eliminating them.
- Improve customer deliverable through report template and procedural updates.
- Write scripts to automate assessment tasks and improve work efficiency.

**1.2 Skills and Experience**:
1. Minimum 2 years of direct security experience. Fresh graduates are welcomed if the answers are Yes to Item 8, 9, 10, and 11.

2. In-depth knowledge the TCP/IP stack.

4. Familiar with various network topologies and standards such as LAN/WAN/VPN/Wireless LAN.

5. Expert or advanced knowledge in internals of Windows or Unix/Linux operating system. You are not required to be an expert in both OS but you have to be an expert in at least one.

6. Familiar with various security tools including port scanners, vulnerability scanners (network/OS/app/web app), exploit frameworks, sniffers, password crackers, and wireless auditing tools.

9. Proficient in at least one of the following programming/scripting languages: Python, C, Golang, Assembly, Perl, and Bash. Other programming language can be considered.

10. Practical knowledge in exploit writing/development.

11. Familiar with debugger tools such as IDA Pro, WinDBG, Immunity Debugger, and gdb.

**1.3 Soft Skills**:

- Good command in both Written and Spoken English.
- An ability to work under a dynamic environment and remotely.
- Good team player.
- Able to work under pressure with positive attitude towards the team.
- Reliable responsibility.
- Must be able to travel abroad.

CQ is a network security company offering offensive security services and solutions focused on active offensive and defensive positioning. Since its establishment, ECQ provides superior consultancy services to clients in many different industries, including financial sector, infrastructure, service providers and government agencies.

ECQ is highly trusted by many enterprises internationally to provide in-depth security assessment, highly resilient security designs, and innovative security technologies. With its current presence in the Singapore, Thailand, Vietnam, and USA, ECQ aims to continuously deliver high quality security services to many diverse customers around the globe.