1. Experience in performing Vulnerability Assessments for IT infrastructure including network devices, operating systems, other infrastructure servers, etc. 2. Experience in Vulnerability Assessment of multiple servers including Apache, IIS, SMTP, FTP and Tomcat. 3. Experience in conducting Security Assessment of multiple network devices including CISCO IOS, CISCO PIX, Cisco ASA, Juniper Net screen, Fortigate firewall and Sonicwall firewall etc. 4. Experience in reviewing router/switch configuration, IOS version, telnet password guessing, Web management interface, access-list mapping & default accounts. 5. Ability to review Mail server configuration, Information leakage, Web interface, Susceptibility of Open Relay, Mail header parsing errors, Buffer overrun, Administrator Interface, Patch management, User & password management 6. Experience in drafting formal documentation, Project reports, Statements of Work, Deliverable Reports, etc. |