Part-timers & Freelancers are welcomed to apply this Full time position
We are looking for experienced security professionals who can help our clients achieve a secured environment for their applications and web information. You must have strong experience in performing penetration testing and vulnerability management services for applications, network systems, operating systems and databases. Candidates should have experience with black box, grey box, and white box testing. Selected candidates will work on a whole-of-government platform that hosts close to 500 web applications.
Perform Secure Code Reviews of the application code using both Manual and Automated Approach.
Conduct security assessments such as penetration and vulnerability tests
Keep updated on knowledge of the IT security industry: including awareness of new or revised security solutions, security standards, trends / best practices, offensive techniques and tools
Perform Blackbox/Graybox testing of Web/Mobile/Thick client applications
Perform Network Vulnerability Assessments and Penetration Testing
Risk Evaluation of observed vulnerabilities based on common risk scoring techniques such as CVSS
Knowledge-share with team on techniques and results
Create detailed report of findings and recommendations after testing is complete and present to stakeholders
Coordinate with developers/stakeholders on the findings for appropriate fixes
Stay up-to-date in current tools, techniques, and vulnerabilities to incorporate into testing practices