Job Description
The Technical Assessor for Non-Intrusive Technical Assessments is responsible for conducting security assessments that do not involve direct interaction with or alteration of the target systems. This role focuses on evaluating security controls, configurations, and policies to identify potential vulnerabilities and areas for improvement. The role requires a deep understanding of security controls and the ability to analyze configurations and policies without impacting system performance.
Responsibilities
Assessment Execution:
- Conduct non-intrusive technical assessments, including configuration reviews, policy evaluations, and security controls assessments.
- Analyze system configurations, security policies, and procedures to identify vulnerabilities and areas for improvement.
- Perform remote assessments where applicable, adhering to established protocols.
Documentation:
- Prepare detailed reports documenting assessment findings, including identified vulnerabilities, weaknesses, and recommendations for remediation.
- Ensure reports are comprehensive, accurate, and tailored to the needs of the client.
- Maintain thorough documentation of assessment processes and methodologies used.
Tool Utilization:
- Use approved assessment tools and ensure they are properly documented and approved by relevant authorities.
- Stay updated on the latest tools and technologies in non-intrusive assessments.
- Ensure tools are used effectively and appropriately for each assessment.
Compliance:
- Ensure all assessments adhere to organizational policies, industry standards, and applicable regulations.
- Maintain an understanding of relevant compliance requirements and incorporate them into assessment processes.
- Report any compliance issues or deviations to the Team Lead or Assessment Manager.
Collaboration:
- Work closely with other assessment team members and clients to ensure accurate and comprehensive evaluations.
- Communicate assessment results and recommendations clearly to both technical and non-technical stakeholders.
- Participate in team meetings and provide input on assessment strategies and methodologies.
Desired Candidate Profile
- Strong analytical and problem-solving skills.
- Attention to detail and accuracy in assessment documentation.
- Proficiency in using security assessment tools.
- Excellent communication and reporting skills.
- Ability to work independently and manage time effectively.