Position Details:
Job Title: Jr. Penetration Tester
Location: Augusta, ME 04333
Duration: 12+ Months (Strong possibility for an extension)
Project Name: Web Application Security
• This project is supporting deployment certification.
Job Description:
• Contractors primary responsibility is to work with application/development customers, and vendors to detect, analyze and assist in security remediation activities with Client Web Applications. The candidate should also have a basic understanding of security principles around the availability, confidentiality and integrity of data.
Representative Tasks:
• Runs Web application vulnerability software to detect security issues in web applications.
• Analyzes output of web application test scans to determine valid security issues.
• Meets with internal/external customers to analyze outputs from web application scans.
• Recommends remediation and mitigation strategies of security issues in web applications to customers
Minimum Required Qualifications:
• 2 years’ experience performing system administration functions in a LAN/WAN environment.
• 2 years’ experience working with computer Operating Systems (Windows, Linux, Unix)
• 1-2 years’ experience working on Web hosting Platforms (IIS, Tomcat)
• Basic understanding of HTML
• Basic understanding of Java, Java Script
Required Experience/Skills:
• Troubleshoot and solve complex technical computer or network issues.
• Run automated Web application security test software.
• Understanding of OWASP Top Ten vulnerabilities
• Communicate effectively, write clearly, and present security concepts to non-technical audiences.
• Perform research and be comfortable making recommendations to management on technical cyber security issues.
• Develop and coordinate training programs involving security applications.
• Detect and determine potentially serious cyber security hazards on the network.
• Develop and manage user-oriented computing activities.
• Document, author, and produce written test plans, test reports, operating instructions, standard operating procedures, and technical documentation.
• Windows, Intermediate
• UNIX/LINUX, Intermediate
• Java, Beginner
• PHP, Beginner
• HTML, Intermediate
• Manual Testing, Beginner
• ATE, Beginner
• JIRA, Beginner
Required Knowledge/Understanding:
• Web Vulnerability/Risk assessment processes
• OWASP top 10 vulnerabilities
• Complex multi-user network systems.
• Complex software applications on PC's, servers, and networks.
• Operating systems on PC's and servers.
• Ethernet networking, IP addressing and TCP/IP.
• Proper computer system data security/backup procedures.
All your information will be kept confidential according to EEO guidelines.
Job details are sourced from the employer's original posting.
Open job postingAbout the company
vTech can help you avoid the daunting task of writing and posting job offers, shifting through resumes and laboring through the lengthy interview process. Our Staffing solutions will allow you to elude those tasks and place topnotch, high-caliber professionals in the position you need to fill. We use our expertise, knowledge, and global resources to deliver top-quality candidates and tailor our IT and Non-IT recruitment services to your needs. This allows us to deliver the required results in a timely manner that meets your schedule at a substantially reduced cost. We pride ourselves for having one of the fastest growth rate and also the lowest turnover rates in the industry just 2.5 percent annually . We focus on the training and retaining qualified professionals with high personal and work ethics. With the help of our extensive database of internal candidates and CATS applicants tracking system, we can provide quality resources within the limited time frame. We have also successfully placed hundreds of candidates in the areas related to Information Technology, Engineering, professional, Scientific & Clinical, etc. for both our commercial and government clients. Source: A recruiter sources candidates from various sources; the search starts from our proprietary database. Using advanced sourcing methods like social media, professional networking media, internal, and 3rd party job boards, we identify qualified candidates. Validate: A recruiter validates the candidates’ experience and skill sets against our client’s position. Initial Screening: Based on the position and the client’s work culture, the recruiter uses initial screening questions to determine the most suitable candidates. Submit: the recruiter will submit to the technical team qualified candidates who have passed the initial screening. Technical Screening: The technical team then prepares a matrix of the particular requirements and required experience for the position and using a list of questions and the results, re-validates the candidates’ technical skills. Background Check: Administrative personnel will provide a detailed background check, as required, per client agreement. On board: On successfully completing the above steps, the candidates are welcomed on board and assisted to ensure a smooth integration at the client’s location.