Network Security

Good understanding of TCP/IP, OSI model, DNS, DHCP, VPN, routing, switching, firewalls, and common ports/protocols. Hands-on experience with tools such as Nmap, Nessus, Qualys, Nexpose, Metasploit, Wireshark, Netcat, Nikto, Hydra, and Kali Linux. Ability to perform port scanning, service enumeration, vulnerability validation, and basic exploitation. Knowledge of common network vulnerabilities such as weak SSL/TLS, default credentials, insecure protocols, SMB issues, outdated services, missing patches, and risky open ports. Ability to validate scan findings manually and reduce false positives. Basic understanding of CVE, CVSS, risk rating, impact, and remediation. Should be able to prepare technical findings with evidence, impact, and remediation recommendations. Should have thorough understanding on various Network security standards, frameworks and threat models. Good to have: Basic scripting, firewall/configuration review exposure, AD basics, PCI DSS/ISO 27001 other compliance and benchmark exposure. Certification: CEH/eJPT/Security+/PJPT/eCPPT certification.