Network Security

• Good understanding of TCP/IP, OSI model, DNS, DHCP, VPN, routing, switching, firewalls, and common ports/protocols.
• Hands-on experience with tools such as Nmap, Nessus, Qualys, Nexpose, Metasploit, Wireshark, Netcat, Nikto, Hydra, and Kali Linux.
• Ability to perform port scanning, service enumeration, vulnerability validation, and basic exploitation.
• Knowledge of common network vulnerabilities such as weak SSL/TLS, default credentials, insecure protocols, SMB issues, outdated services, missing patches, and risky open ports.
• Ability to validate scan findings manually and reduce false positives.
• Basic understanding of CVE, CVSS, risk rating, impact, and remediation.
• Should be able to prepare technical findings with evidence, impact, and remediation recommendations.
• Should have thorough understanding on various Network security standards, frameworks and threat models.

Good to have: Basic scripting, firewall/configuration review exposure, AD basics, PCI DSS/ISO 27001 other compliance and benchmark exposure.

Certification: CEH/eJPT/Security+/PJPT/eCPPT certification.