SC2024-003981 Penetration Testing Services (NS) - THU 23 Jan

View full description

Requirements:

• The candidate must have a currently active NATO SECRET security clearance.
• The required skillset includes extensive knowledge and experience (more than 5 years) in web application and thick-client penetration testing.
• Assessing security vulnerabilities within operating systems, software, protocols, and networks.
• Researching and evaluating security products and technologies.
• Knowledge in system and network administration of UNIX and Windows systems.
• Proficient use of penetration testing tools, techniques, and recognized testing methodologies.
• Scripting skills in at least one of the following: Perl, Python, Ruby, or shell (bash, ksh, csh).
• Technical knowledge in system and network security, authentication protocols, cryptography, application security, and malware protection.
• Ability to evaluate risks and formulate mitigation plans.
• Proven ability to write clear and structured technical reports including executive summaries, technical findings, and remediation plans.

Responsibilities:

• Provide web and application level penetration testing.
• Conduct security design reviews to ensure compliance with NATO policies and directives.
• Offer security consultancy and advice to various projects and plans.
• Brief stakeholders at technical levels regarding security reports and testing outcomes.