About KabulSpace:

Welcome to KabulSpace, a premier software development and IT solutions company headquartered in Kabul, Afghanistan. We specialize in creating tailored digital applications, offering end-to-end services from custom software design to system integration and consulting.

Our expertise extends to enterprise networking and mission-critical network infrastructure, ensuring reliable support and scalability for businesses. With a skilled and passionate team, we deliver innovative, efficient, and customer-focused solutions that empower organizations, whether private enterprises or non-governmental entities, to thrive in a dynamic technological landscape. Let’s shape the future together!

Job Summary:

The Senior Cybersecurity Expert will perform advanced penetration testing using Kali Linux, conduct thorough security assessments of mobile applications, and implement cutting-edge methodologies to protect organizational assets from cyber threats. This role focuses on strengthening organizational defenses, ensuring secure application development, and mitigating risks across diverse environments.

Key Responsibilities:

1. Penetration Testing

• Perform penetration testing on web applications, mobile applications (Android & iOS), APIs, and network infrastructures using Kali Linux tools.
• Exploit vulnerabilities to assess the impact and develop remediation strategies.
• Conduct red teaming and advanced persistent threat (APT) simulation exercises.
• Document findings in detailed reports with actionable recommendations.

2. Mobile Application Security

• Conduct security assessments for Android and iOS applications using tools like MobSF, Drozer, and Burp Suite.
• Analyze mobile app code for vulnerabilities (e.g., static and dynamic code analysis).
• Test for vulnerabilities listed in OWASP Mobile Top 10, including insecure data storage, weak encryption, and improper session handling.
• Guide development teams on secure coding practices and secure software development lifecycle (SDLC).

3. Cybersecurity Defense

• Harden server and network configurations against emerging threats.
• Develop custom scripts and tools for automated testing and monitoring.
• Risk Assessment & Mitigation: Identify, analyze, and address cybersecurity risks.

4. Incident Response and Forensics

• Establish and execute incident response protocols for various attack scenarios.
• Conduct forensic analysis of compromised systems to identify attack vectors.
• Develop and update playbooks for rapid detection and mitigation of cyber incidents.

5. Training and Awareness

• Train internal teams on cybersecurity tools, methodologies, and best practices.
• Develop and deliver workshops on penetration testing and mobile security.
• Create educational content for organization-wide security awareness programs.

6. Compliance and Reporting

• Ensure adherence to regulatory standards and cybersecurity frameworks.
• Prepare comprehensive reports for stakeholders, highlighting risks, solutions, and progress.
• Assist in external and internal audits to ensure compliance with security policies.

Required Qualifications and Skills:

Educational Background

• Minimum: Master degree in Cybersecurity, or a related field.

Certifications

• • Offensive Security Certified Professional (OSCP)
  • Certified Information Systems Security Professional (CISSP)
  • CompTIA Cybersecurity Analyst (CySA+)

Technical Skills

• Penetration Testing:
  • Proficiency in using Kali Linux tools like Metasploit, Nmap, Wireshark, Hydra, and Nikto.
  • Familiarity with exploitation frameworks and payload generation tools.
• Mobile Security:
  • Experience with reverse engineering and dynamic testing.
  • Knowledge of secure coding practices for mobile applications.
• Scripting:
  • Advanced knowledge of Python, Bash, and PowerShell for custom tool development.
• General Cybersecurity Tools:
  • Hands-on experience with SIEM platforms) and monitoring tools.
  • Proficiency with cloud security tools and frameworks (AWS, Azure).

Experience

• At least 5 years of experience in penetration testing and identifying, exploiting, and mitigating vulnerabilities.
• Track record of published reports, security advisories, or research contributions.

Applicants are required to mention the Job Title and Vacancy # in the subject line of their email. Please attach your updated CV and a cover letter and send them to hr@kabulspace.af, with a copy (CC) to kabulspace2025@gmail.com. The application deadline is 05-February-2025, so ensure your submission is sent before this date.

Only shortlisted candidates will be contacted for an interview and a demo session. We look forward to receiving your applications.