03.10.2026 aktualisiert
AR
100 % verfügbar
Security Engineer (SOC) | Cybersecurity Consultant | Penetration Testing & Threat Intelligence
Quatre Bornes, Mauritius
Nur Remote
BSc Computer Science (Systems Engineering), Middlesex University (2020-2023)Skills
Penetration TestingWhite Box TestingIntelligence AnalystVulnerability ScanningOpen Source IntelligencePenetration ToolsPhishingWiresharkCyber Threat AnalysisFirewallsMetasploitTesting (Hardware)
Vulnerability Assessment & Penetration Testing
Extensive experience conducting VAPT (black-box and white-box testing) to evaluate the security of web applications, APIs, servers, and Android apps in accordance with OWASP standards, using tools such as Nessus, Metasploit, Acunetix, OWASP ZAP, Burp Suite, Wireshark, Nmap, MobSF, SonarQube, and Qualys.
Cyber Threat Intelligence
Proficiency in delivering actionable threat intelligence reports using platforms such as Digital Shadows and Recorded Future, identifying and mitigating high-severity and critical threats for enterprise clients.
Incident Response
Hands-on experience monitoring, investigating, and triaging security alerts using GreyMatter, QRadar, and CrowdStrike, supporting containment and remediation activities, and creating incident response playbooks.
Social Engineering
Knowledge and practical application of social engineering techniques and defense, including the use of GoPhish for simulated phishing campaigns and certified as a Social Engineering Defense Practitioner.
Secure Configuration Review
Review of security configuration settings on large numbers of devices including servers, firewalls, databases, and networks for enterprise clients, ensuring CIS Benchmark compliance.
Governance, Risk & Compliance (GRC)
Strengthening GRC frameworks by conducting gap and maturity assessments, performing Business Impact Analysis, developing strategic roadmaps, and defining risk appetite and KRIs for proactive risk management.
Programming
Working knowledge of programming and scripting languages including HTML, JavaScript, Python, SQL, and Bash for security-related tasks and automation.
Security Awareness Training
Development and management of security awareness training programs and social engineering scenarios for clientele, supporting a security-conscious culture within organizations.
NIST Cybersecurity Framework
Support of NIST Cybersecurity Framework audit activities and participation in cyber wargames and internal CTF exercises.
Extensive experience conducting VAPT (black-box and white-box testing) to evaluate the security of web applications, APIs, servers, and Android apps in accordance with OWASP standards, using tools such as Nessus, Metasploit, Acunetix, OWASP ZAP, Burp Suite, Wireshark, Nmap, MobSF, SonarQube, and Qualys.
Cyber Threat Intelligence
Proficiency in delivering actionable threat intelligence reports using platforms such as Digital Shadows and Recorded Future, identifying and mitigating high-severity and critical threats for enterprise clients.
Incident Response
Hands-on experience monitoring, investigating, and triaging security alerts using GreyMatter, QRadar, and CrowdStrike, supporting containment and remediation activities, and creating incident response playbooks.
Social Engineering
Knowledge and practical application of social engineering techniques and defense, including the use of GoPhish for simulated phishing campaigns and certified as a Social Engineering Defense Practitioner.
Secure Configuration Review
Review of security configuration settings on large numbers of devices including servers, firewalls, databases, and networks for enterprise clients, ensuring CIS Benchmark compliance.
Governance, Risk & Compliance (GRC)
Strengthening GRC frameworks by conducting gap and maturity assessments, performing Business Impact Analysis, developing strategic roadmaps, and defining risk appetite and KRIs for proactive risk management.
Programming
Working knowledge of programming and scripting languages including HTML, JavaScript, Python, SQL, and Bash for security-related tasks and automation.
Security Awareness Training
Development and management of security awareness training programs and social engineering scenarios for clientele, supporting a security-conscious culture within organizations.
NIST Cybersecurity Framework
Support of NIST Cybersecurity Framework audit activities and participation in cyber wargames and internal CTF exercises.
Erfahrung
Berufserfahrung0 - 5 Jahre
Freelancer seit2026
Sprachen
EnglishverhandlungssicherFrenchgut
Projekthistorie
Monitoring, investigating, and triaging 500+ security alerts using GreyMatter, QRadar, and CrowdStrike. Supporting incident response, performing email security investigations using Microsoft Defender and Microsoft Entra ID, conducting threat hunting, supporting vulnerability management using Qualys, creating incident response playbooks, and supporting NIST Cybersecurity Framework audit activities and CTF exercises.
Reviewed security configuration settings on 750+ devices for large enterprise clients ensuring CIS Benchmark compliance. Delivered threat intelligence reports using Digital Shadows, conducted VAPT on 150+ web applications and APIs, strengthened GRC frameworks, developed security awareness training programs, drafted scopes of work and RFPs, developed technical reports and executive presentations, and managed CTI & VAPT workstreams while mentoring junior analysts.