Should have prior knowledge of various standards such as ISO 27001, RBI Guidelines, PCI / DSSShould be able to make a conversion with client on various aspects of complianceShould have hands-on experience in VA-PT tools (Nessus)Should be able to understand the VA – PT report and explain to customer or infra vendorShould have experience in hardening of OS, databases and performing baseline checking