Cyber Security Senior Analyst - Pentesting

Gcosenior

Security AnalystCybersecurity

1 views0 saves0 applied

Quick Summary

Overview

• Individuals with technical expertise on one or more cyber security or information security topics• Recognized as consultant for cyber domains with internal teams and business.

Technical Tools

Security AnalystCybersecurity

• Individuals with technical expertise on one or more cyber security or information security topics
• Recognized as consultant for cyber domains with internal teams and business.
• Assist functional head in building technical capabilities, strategic cyber roadmaps and team competencies based on priorities and policies of Group and GSC.
• Work as technical expert for the domain(s) and execute cyber programs of medium to complex nature and support in delivery.
• Help functional manager in identifying technical loopholes in processes and interdependencies.
• Develop holistic solutions and manage transversal cyber programs.
• Act as a consultant on key cyber topics.
• Stakeholder management and relationship building with technical counterparts Individuals with technical expertise on one or more cyber security or information security topics.
• Recognized as consultant for cyber domains with internal teams and business.
• Assist functional head in building technical capabilities, strategic cyber roadmaps and team competencies based on priorities and policies of Group and GSC.
• Work as technical expert for the domain(s) and execute cyber programs of medium to complex nature and support in delivery.
• Help functional manager in identifying technical loopholes in processes and interdependencies.
• Develop holistic solutions and manage transversal cyber programs.
• Act as a consultant on key cyber topics.
• Stakeholder management and relationship building with technical counterparts.

Perform network, server, and system‑level security assessments including on‑prem, cloud (AWS/Azure/GCP), and virtualization platforms

Identify vulnerabilities, misconfigurations, weak authentication mechanisms, insecure protocols, and privilege escalation paths

Perform Active Directory security assessments including Kerberos attacks, NTLM abuse, delegation issues, lateral movement, and domain persistence techniques

Execute external and internal network assessments, VPN testing, firewall rule reviews, and segmentation testing

Conduct configuration review for operating systems, servers, devices, and security controls using CIS benchmarks and hardening guidelines

Validate security of identity and access management (IAM), authentication, authorization, password policies, and privilege models

Perform post‑exploitation activities such as pivoting, credential harvesting, lateral movement, and data exfiltration simulations

Prepare detailed penetration testing reports including risk rating, impact analysis, proof‑of‑concept, and remediation guidance

Communicate findings clearly to technical and non‑technical stakeholders

• Strong understanding of networking concepts: TCP/IP, DNS, DHCP, SMTP, HTTP/S, SNMP, VPNs, firewalls, IDS/IPS
• Thorough understanding of enterprise infrastructure architectures
• Hands‑on experience with Windows, Linux, and Unix operating systems
• Knowledge of security standards, frameworks, and methodologies (OWASP, MITRE ATT&CK, NIST, ISO 27001, PTES)

Within Societe Generale Global Solution Center (SGGSC), you will join Global AppSec domain team based out of Bengaluru, working in Pentest team to contribute to Global Pentest practice.

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.