Urgent role: System engineer- security with certification (i.e. GWAPT, OSCP, OSCE, GPEN) at Remote, Remote, USA |
Email: [email protected] |
From: vishal, Tekinspirations [email protected] Reply to: [email protected] Hi, Possess current professional certification (i.e. GWAPT, OSCP, OSCE, GPEN) I Hope you are doing great. Please find below position if you have any matching candidate as per requirement. Please send me updated resume with candidate information. Role:Systems Engineer - Security Duration: 6+ Months Location: Hybrid- Dallas TX Loca MOI: Skype Systems Engineer - Security Web Application Penetration Tester Day to day: * Conduct assessments of web applications, mobile applications, databases, client-side applications and tools, and APIs. * Execute manual and automated code analysis to assess the quality and security of source code. * Perform pre-assessment research and preparation including reconnaissance, documentation and configuration review, and customer interviews. * Develop custom tools and exploits. * Analyze security findings, including risk analysis and root cause analysis. * Generate comprehensive reports, including detailed findings, exploitation procedures, and mitigations. * Develop and deliver walkthrough(s), proof(s) of concept (PoCs), articles, and formal presentations. * Execute verification and validation testing for customer mitigations and fixes Must haves: * 5-8 years experience * Experience in testing web-based APIs (i.e. REST, SOAP, XML, JSON). * Experience in designing and documenting pragmatic remediation guidance for discovered vulnerabilities. * Familiarity with common web vulnerabilities including: XSS, XXE, SQL Injection, Deserialization Attacks, File Inclusion/Path Traversal Attacks, Server-side Request Forgery, Remote Execution Flaws, Server Configuration Flaws and Authentication Flaws. * Experience developing actionable intelligence based on open source intelligence (OSINT) gathering. * Experience with 1 or more scripting languages such as Bash, Python, Perl, PowerShell, etc. * Solid understanding of OWASP testing methodology. * 3+ years of experience using Burp Suite Pro or equivalent application (e.g. ZAP). * Web application development or source code review experience. * Strong knowledge of Windows and Linux operating systems. * Working knowledge of containerized applications and container-based security controls and configurations. * Possess current professional certification (i.e. GWAPT, OSCP, OSCE, GPEN) Vishal chaurasiya Technical Recruiter Desk : 469-498-0625 Email: [email protected] TEK Inspirations LLC : 13573 Tabasco Cat Trail, Frisco, TX 75035 Keywords: Texas |
[email protected] View all |
Thu Jan 25 02:37:00 UTC 2024 |