-
Collect stakeholder data to evaluate risk and to develop mitigation strategies.
-
Conduct network and security system audits, using established criteria.
-
Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
-
Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
-
Develop infiltration tests that exploit device vulnerabilities.
-
Identify security system weaknesses, using penetration tests.
-
Develop presentations on threat intelligence.
-
Discuss security solutions with information technology teams or management.
-
Document penetration test findings.
-
Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.
-
Update corporate policies to improve cyber security.
-
Prepare and submit reports describing the results of security fixes.
-
Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
-
Develop and execute tests that simulate the techniques of known cyber threat actors.
-
Configure information systems to incorporate principles of least functionality and least access.
-
Identify new threat tactics, techniques, or procedures used by cyber threat actors.
-
Gather cyber intelligence to identify vulnerabilities.
-
Keep up with new penetration testing tools and methods.
-
Maintain up-to-date knowledge of hacking trends.
-
Design security solutions to address known device vulnerabilities.
-
Write audit reports to communicate technical and procedural findings and recommend solutions.
-
Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.