Must have Hand On with following Tools Nmap, Burp Suite, ZAP, Qualys, Metasploit, Wireshark, Nessus, OpenVAS, Acunetix, Yara, Cuckoo Sandbox, Ghidra.
Must have strong knowledge on SIEM Tools of Splunk and FortiSIEM
Must have knowledge on Programming Languages:
Python, Bash, PowerShell, Yara, SQL, Nodejs
Must have knowledge on MITRE ATT&CK techniques, OWASP Top 10.
Must have knowledge on DNS, DHCP and Network Protocols.
Must have hand on experience of Web Application Firewall, Next Generation Firewall (Palo alto, Fortinet), Load Balancer, EDR, XDR, PAM, IAM.
Must have deep understanding of Entrust, web application security threats, vulnerabilities, exploits, and prevention (SQL Injection, XSS, CSRF, platform hardening, etc.)