Jr. Penetration Tester

Duration:

12+ Months (Strong possibility for an extension)

Web Application Security

Contractor’s primary responsibility is to work with application/development customers and vendors to detect, analyze and assist in security remediation activities with client web applications. The candidate should also have a basic understanding of security principles around the availability, confidentiality and integrity of data.

• Runs Web application vulnerability software to detect security issues in web applications.
• Analyzes output of web application test scans to determine valid security issues.
• Meets with internal/external customers to analyze outputs from web application scans.
• Recommends remediation and mitigation strategies of security issues in web applications to customers.

• 2 years’ experience performing system administration functions in a LAN/WAN environment.
• 2 years’ experience working with computer operating systems (Windows, Linux, Unix).
• 1-2 years’ experience working on web hosting platforms (IIS, Tomcat).
• Basic understanding of HTML.
• Basic understanding of Java, JavaScript.

• Troubleshoot and solve complex technical computer or network issues.
• Run automated web application security test software.
• Understanding of OWASP Top Ten vulnerabilities.
• Communicate effectively, write clearly, and present security concepts to non-technical audiences.
• Perform research and be comfortable making recommendations to management on technical cyber security issues.
• Develop and coordinate training programs involving security applications.
• Detect and determine potentially serious cyber security hazards on the network.
• Develop and manage user-oriented computing activities.
• Document, author, and produce written test plans, test reports, operating instructions, standard operating procedures, and technical documentation.

• Web vulnerability/risk assessment processes.
• Complex software applications on PCs, servers, and networks.
• Operating systems on PCs and servers.
• Ethernet networking, IP addressing and TCP/IP.
• Proper computer system data security/backup procedures.

All your information will be kept confidential according to EEO guidelines.