Jr. Penetration Tester

Jr. Penetration Tester

Job Title: Jr. Penetration Tester

Location: Augusta, ME 04333

Duration: 12+ Months (Strong possibility for an extension)

Project Name: Web Application Security

This project is supporting deployment certification.

Contractors primary responsibility is to work with application/development customers, and vendors to detect, analyze and assist in security remediation activities with Client Web Applications. The candidate should also have a basic understanding of security principles around the availability, confidentiality and integrity of data.

Representative Tasks:

• Runs Web application vulnerability software to detect security issues in web applications.

• Analyzes output of web application test scans to determine valid security issues.

• Meets with internal/external customers to analyze outputs from web application scans.

• Recommends remediation and mitigation strategies of security issues in web applications to customers

Minimum Required Qualifications:

• 2 years' experience performing system administration functions in a LAN/WAN environment.

• 2 years' experience working with computer Operating Systems (Windows, Linux, Unix)

• 1-2 years' experience working on Web hosting Platforms (IIS, Tomcat)

• Basic understanding of HTML

• Basic understanding of Java, Java Script

Required Experience/Skills:

• Troubleshoot and solve complex technical computer or network issues.

• Run automated Web application security test software.

• Understanding of OWASP Top Ten vulnerabilities

• Communicate effectively, write clearly, and present security concepts to non-technical audiences.

• Perform research and be comfortable making recommendations to management on technical cyber security issues.

• Develop and coordinate training programs involving security applications.

• Detect and determine potentially serious cyber security hazards on the network.

• Develop and manage user-oriented computing activities.

• Document, author, and produce written test plans, test reports, operating instructions, standard operating procedures, and technical documentation.

Required Knowledge/Understanding:

• Web Vulnerability/Risk assessment processes

• OWASP top 10 vulnerabilities

• Complex multi-user network systems.

• Complex software applications on PC's, servers, and networks.

• Operating systems on PC's and servers.

• Ethernet networking, IP addressing and TCP/IP.

• Proper computer system data security/backup procedures.

All your information will be kept confidential according to EEO guidelines.