Cybersecurity Consultant TVA

Role Overview

Cybersecurity Consultant at NTT Data Limited. This is an on-site position responsible for conducting vulnerability assessments, penetration testing, and security reviews across customer environments.

Company Overview

NTT Data is a $30+ billion business and technology services leader serving 75% of the Fortune Global 100. The company is committed to accelerating client success and positively impacting society through responsible innovation. NTT Data is one of the world's leading AI and digital infrastructure providers with capabilities in enterprise-scale AI, cloud, security, connectivity, data centers, and application services. As a Global Top Employer, NTT Data has experts in more than 70 countries and provides clients access to a robust ecosystem of innovation centers and established and start-up partners. NTT Data is part of NTT Group, which invests over $3 billion each year in R&D.

Role Purpose

The Cybersecurity Consultant is a hands-on security professional who conducts vulnerability assessments, penetration testing activities, and security reviews to help organizations identify security weaknesses, validate risks, and strengthen their security posture. This role combines technical security testing, customer engagement, and cybersecurity consultancy to reduce risk and improve compliance with security best practices and regulatory requirements.

Key Responsibilities

Vulnerability Assessment & Penetration Testing

• Conduct vulnerability assessments and penetration tests across network, infrastructure, server, application, and cloud environments.
• Perform internal and external network penetration testing within approved scopes and rules of engagement.
• Conduct web application and API security assessments using recognized industry methodologies and frameworks.
• Perform authenticated and unauthenticated vulnerability scanning using approved commercial and open-source security tools.
• Assess Windows, Linux, Active Directory, databases, network devices, and security infrastructure for security weaknesses.
• Perform controlled exploitation activities to confirm vulnerability impact while minimizing operational risk.

Vulnerability Analysis & Reporting

• Validate vulnerabilities identified by automated tools and remove false positives before reporting.
• Evaluate vulnerabilities based on exploitability, asset criticality, technical severity, and business impact.
• Assign risk ratings using CVSS and applicable customer risk-classification methodologies.
• Prepare technical assessment reports, executive summaries, and remediation recommendations.
• Maintain assessment evidence, testing records, screenshots, tool outputs, and supporting documentation.

Stakeholder Engagement & Communication

• Present assessment findings and risk remediation plans to technical and business stakeholders.
• Conduct remediation workshops and provide technical guidance to customer teams.
• Communicate technical vulnerabilities and risks to both technical and business stakeholders.

Remediation & Validation

• Perform remediation validation and retesting activities.

Planning & Compliance

• Support assessment planning activities, including scope definition, methodology selection, and rules of engagement.
• Ensure all testing activities comply with approved authorization requirements and security testing procedures.

Security Consulting & Frameworks

• Support security consulting initiatives related to system hardening, vulnerability remediation, application security, and infrastructure security.
• Assist with security assessments aligned to recognized frameworks including NCA ECC, SAMA CSF, ISO 27001, CIS Controls, and PCI DSS.

Continuous Improvement & Business Support

• Contribute to continuous improvement of internal security testing methodologies, reporting templates, and knowledge repositories.
• Support presales activities by providing technical input for customer proposals, assessment scope definitions, and effort estimates.
• Perform any other cybersecurity consulting, vulnerability management, or penetration testing activities as required.

Qualifications & Experience

Education

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related technical discipline.
• Equivalent practical experience may be considered where strong hands-on security testing expertise is demonstrated.

Certifications

• Preferred certifications include: OSCP, CREST CRT, GPEN, PNPT, eCPPT, CompTIA PenTest+, Burp Suite Certified Practitioner (BSCP), CEH, or CEH Practical.

Experience

• 5-7 years of cybersecurity, vulnerability assessment, penetration testing, or security consulting experience.
• Minimum 3 years of recent hands-on vulnerability assessment and penetration testing experience.
• Demonstrated experience conducting internal and external network penetration tests.
• Hands-on experience performing web application and API security assessments.
• Experience using vulnerability management platforms such as Tenable, Qualys, or Rapid7.
• Experience performing vulnerability validation, exploitation, remediation verification, and retesting.
• Experience preparing professional technical security reports and presenting findings to customers and stakeholders.
• Experience assessing Windows, Linux, Active Directory, network infrastructure, and enterprise environments.
• Experience working directly with customer engagements within a cybersecurity consulting, systems integration, or professional services environment.
• Experience with Active Directory security testing is strongly preferred.
• Cloud, wireless, mobile application, container security, or red team experience is advantageous.
• Exposure to NCA ECC, SAMA CSF, ISO 27001, PCI DSS, or related security frameworks is considered beneficial.

Skills & Competencies

Technical Knowledge

• Strong understanding of vulnerability assessment and penetration testing methodologies.
• Strong knowledge of TCP/IP networking, routing, switching, DNS, HTTP/HTTPS, VPNs, firewalls, and enterprise network services.
• Good working knowledge of Windows, Linux, and Active Directory environments.
• Familiarity with common attack techniques including privilege escalation, credential attacks, lateral movement, and Active Directory exploitation.
• Strong understanding of OWASP Top 10, OWASP API Security Top 10, CVSS, CWE, and MITRE ATT&CK frameworks.
• Understanding of common security technologies including WAF, IDS/IPS, NAC, EDR, SIEM, and secure remote access solutions.

Tools & Systems

• Practical experience using security assessment tools such as Burp Suite, Nmap, Nessus, Qualys, Rapid7, Metasploit, Wireshark, OWASP ZAP, and Kali Linux.
• Strong working experience with tools including Burp Suite, Metasploit, Nmap, Kali Linux, and Wireshark.

Programming & Scripting

• Basic scripting capabilities using Python, PowerShell, Bash, or similar languages.

Soft Skills

• Ability to manually validate vulnerabilities and distinguish genuine findings from false positives.
• Strong analytical and problem-solving skills with the ability to think from an attacker's perspective.
• Strong report writing, evidence documentation, and presentation skills.
• Ability to manage multiple customer engagements and work independently while maintaining high-quality deliverables.
• Strong professional integrity and commitment to maintaining customer confidentiality.
• Strong written and verbal English communication skills; Arabic language capability is an advantage.

Additional Information

• Workplace type: On-site.
• NTT Data is an Equal Opportunity Employer with a global culture that embraces diversity and is committed to providing an environment free of unfair discrimination and harassment.