Perform hands-on vulnerability assessment of various network environments and equipment using the latest tools. Candidate should have the ability to develop initial attack/test approach and adapt on-the-fly based on information gathered during the test. The candidate should be familiar with common vulnerabilities for linux, Windows, networked services and protocols.
Experience with the following tools and technologies desired:
nmap, Wireshark, Nessus, Snort, netcat, tcpdump, IdaPro, Metasploit, etc...
buffer overflow exploits, heap overflow exploits, stack overflow exploits, SQL injection, trojans, etc...
reverse engineering
rootkits