The Role
Perform network security assessments, including port scanning, service enumeration, vulnerability validation, basic exploitation, and manual false-positive reduction. Analyze network vulnerabilities, assess risk using CVE and CVSS, and document technical findings with evidence, impact, and remediation recommendations. Apply network security standards, frameworks, and threat models. Preferred experience includes scripting, firewall reviews, Active Directory, PCI DSS, ISO 27001, and related compliance benchmarks.
Summary Generated by Built In
- Good understanding of TCP/IP, OSI model, DNS, DHCP, VPN, routing, switching, firewalls, and common ports/protocols.
- Hands-on experience with tools such as Nmap, Nessus, Qualys, Nexpose, Metasploit, Wireshark, Netcat, Nikto, Hydra, and Kali Linux.
- Ability to perform port scanning, service enumeration, vulnerability validation, and basic exploitation.
- Knowledge of common network vulnerabilities such as weak SSL/TLS, default credentials, insecure protocols, SMB issues, outdated services, missing patches, and risky open ports.
- Ability to validate scan findings manually and reduce false positives.
- Basic understanding of CVE, CVSS, risk rating, impact, and remediation.
- Should be able to prepare technical findings with evidence, impact, and remediation recommendations.
- Should have thorough understanding on various Network security standards, frameworks and threat models.
Good to have: Basic scripting, firewall/configuration review exposure, AD basics, PCI DSS/ISO 27001 other compliance and benchmark exposure.
Certification: CEH/eJPT/Security+/PJPT/eCPPT certification.
Skills Required
- Good understanding of TCP/IP, the OSI model, DNS, DHCP, VPNs, routing, switching, firewalls, and common ports and protocols
- Hands-on experience with Nmap, Nessus, Qualys, Nexpose, Metasploit, Wireshark, Netcat, Nikto, Hydra, and Kali Linux
- Ability to perform port scanning, service enumeration, vulnerability validation, and basic exploitation
- Knowledge of common network vulnerabilities, including weak SSL/TLS, default credentials, insecure protocols, SMB issues, outdated services, missing patches, and risky open ports
- Ability to manually validate scan findings and reduce false positives
- Understanding of CVE, CVSS, risk rating, impact, and remediation
- Ability to prepare technical findings with evidence, impact, and remediation recommendations
- Understanding of network security standards, frameworks, and threat models
- CEH, eJPT, Security+, PJPT, or eCPPT certification
- Basic scripting experience
- Firewall or configuration review exposure
- Active Directory fundamentals
- PCI DSS, ISO 27001, or other compliance and benchmark exposure
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Infosec is a cybersecurity education company that helps IT and security professionals advance their careers and helps employees become safer online at work and home. Its offerings include Infosec Skills, with more than 1,400 hands-on cybersecurity courses and instructor-led certification boot camps, and Infosec IQ, which provides security-awareness training. Its mission is to equip individuals and organizations to outsmart cybercrime.
