Senior Cybersecurity Expert

Position Title: Senior Cybersecurity Expert

2025-02-06 Kabul Full Time 73

Job Location:	Kabul
Nationality:	Afghan
Category:	Information Technology
Employment Type:	Full Time
Salary:	99000-110000
Vacancy Number:	KS-08
No. Of Jobs:	1
City:	Kabul

Organization:	KabulSpace
Years of Experience:	At least 5 years of experience in penetration testing and identifying, exploiting, and mitigating vulnerabilities.
Contract Duration:	1 Year
Gender:	Male
Education:	Minimum: Master degree in Cybersecurity, or a related field.
Close date:	2025-02-06

About KabulSpace:

About KabulSpace:

Welcome to KabulSpace, a premier software development and IT solutions company headquartered in Kabul, Afghanistan. We specialize in creating tailored digital applications, offering end-to-end services from custom software design to system integration and consulting.

Our expertise extends to enterprise networking and mission-critical network infrastructure, ensuring reliable support and scalability for businesses. With a skilled and passionate team, we deliver innovative, efficient, and customer-focused solutions that empower organizations, whether private enterprises or non-governmental entities, to thrive in a dynamic technological landscape. Let’s shape the future together!

Job Descriptions:

Job Summary:

The Senior Cybersecurity Expert will perform advanced penetration testing using Kali Linux, conduct thorough security assessments of mobile applications, and implement cutting-edge methodologies to protect organizational assets from cyber threats. This role focuses on strengthening organizational defenses, ensuring secure application development, and mitigating risks across diverse environments.

Key Responsibilities:

1. Penetration Testing

Perform penetration testing on web applications, mobile applications (Android & iOS), APIs, and network infrastructures using Kali Linux tools.
Exploit vulnerabilities to assess the impact and develop remediation strategies.
Conduct red teaming and advanced persistent threat (APT) simulation exercises.
Document findings in detailed reports with actionable recommendations.

2. Mobile Application Security

Conduct security assessments for Android and iOS applications using tools like MobSF, Drozer, and Burp Suite.
Analyze mobile app code for vulnerabilities (e.g., static and dynamic code analysis).
Test for vulnerabilities listed in OWASP Mobile Top 10, including insecure data storage, weak encryption, and improper session handling.
Guide development teams on secure coding practices and secure software development lifecycle (SDLC).

3. Cybersecurity Defense

Harden server and network configurations against emerging threats.
Develop custom scripts and tools for automated testing and monitoring.
Risk Assessment & Mitigation: Identify, analyze, and address cybersecurity risks.

4. Incident Response and Forensics

Establish and execute incident response protocols for various attack scenarios.
Conduct forensic analysis of compromised systems to identify attack vectors.
Develop and update playbooks for rapid detection and mitigation of cyber incidents.

5. Training and Awareness

Train internal teams on cybersecurity tools, methodologies, and best practices.
Develop and deliver workshops on penetration testing and mobile security.
Create educational content for organization-wide security awareness programs.

6. Compliance and Reporting

Ensure adherence to regulatory standards and cybersecurity frameworks.
Prepare comprehensive reports for stakeholders, highlighting risks, solutions, and progress.
Assist in external and internal audits to ensure compliance with security policies.

Job Requirements:

Required Qualifications and Skills:

Educational Background

Minimum: Master degree in Cybersecurity, or a related field.

Certifications

- Offensive Security Certified Professional (OSCP)
- Certified Information Systems Security Professional (CISSP)
- CompTIA Cybersecurity Analyst (CySA+)

Technical Skills

Penetration Testing:
- Proficiency in using Kali Linux tools like Metasploit, Nmap, Wireshark, Hydra, and Nikto.
- Familiarity with exploitation frameworks and payload generation tools.
Mobile Security:
- Experience with reverse engineering and dynamic testing.
- Knowledge of secure coding practices for mobile applications.
Scripting:
- Advanced knowledge of Python, Bash, and PowerShell for custom tool development.
General Cybersecurity Tools:
- Hands-on experience with SIEM platforms) and monitoring tools.
- Proficiency with cloud security tools and frameworks (AWS, Azure).

Experience

At least 5 years of experience in penetration testing and identifying, exploiting, and mitigating vulnerabilities.
Track record of published reports, security advisories, or research contributions.

Submission Guidelines:

Applicants are required to mention the Job Title and Vacancy # in the subject line of their email. Please attach your updated CV and a cover letter and send them to hr@kabulspace.af, with a copy (CC) to kabulspace2025@gmail.com. The application deadline is 05-February-2025, so ensure your submission is sent before this date.

Only shortlisted candidates will be contacted for an interview and a demo session. We look forward to receiving your applications.