Description
Responsibilities:• Performing penetration testing and vulnerability assessments, in support of NATO projects;
• Provision and management of vulnerabilities/countermeasures information;
• Pre-production security evaluation;
• Performs the planning, design, management, execution and reporting of penetration tests, using appropriate testing tools and techniques and conforming to agreed process standards and industry specific regulations;
• Uses and maintains test ware (test cases, test scripts, test reports, test plans, etc.) to measure and improve the security of the software being tested.
The profile of the contractor shall meet the following mandatory requirements:
• Last 3-4 years as a full-time penetration tester;
• Hands-on experience in script development related to penetration testing activities;
• Experience in testing cryptographic implementations;
• Up to date with the latest penetration testing tools and technologies;
• Ability to conduct penetration testing techniques, exploitation and post-exploitation;
• Ability to define and scope penetration testing requirements;
• Strong knowledge in Web application penetration testing;
• Strong knowledge in Network penetration testing;
• Source Code assessment skills in multiple language such as c, c#, php, asp, java, …;
The profile of the contractor should also meet the following desirable requirements:
• Certified CHECK team member/leader or equivalent (CREST or TIGER or SANS GPEN or GXPN);
• Published security research/vulnerabilities (possibly with CVE attribution) or winner of CTF/bug bounty programs;
• Tools Development (shell scripting, Python, Ruby, etc)
• Social Engineering skills;
• Exploit development experience and ability to defeat protection mechanisms;