Penetration Tester

Penetration Tester - Belgium - 5 months - rate

€500 per day - Contract

Candidates must possess - NS/SC or CTS clearance

Overview:

The purpose of penetration testing is to identify vulnerabilities of systems under the control of the Agency in order to reduce the risk of systems being compromised by external/internal threats. It also intends to assess the nature and impact of vulnerabilities and communicate this to relevant decision makers within NATO where corrective steps can be actioned.

Activities to be performed:

Performs the planning, design, management, execution and reporting of penetration tests, using appropriate testing tools and techniques and conforming to agreed process standards and industry specific regulations.

Uses and maintains testware (test cases, test scripts, test reports, test plans, etc.) to measure and improve the security of the software being tested.

1. Last 3-4 years as a Full time penetration tester;

2. Hands-on experience in script development related to penetration testing activities;

3. Experience in testing cryptographic implementations;

4. Up to date with the latest penetration testing tools and technologies;

5. Ability to conduct penetration testing techniques, exploitation and post-exploitation;

6. Ability to define and scope penetration testing requirements;

7. Strong knowledge in Web application penetration testing;

8. Strong knowledge in Network penetration testing;

9. Source Code assessment skills in multiple language such as c, c#, PHP, ASP, Java;

10. Teamwork and adaptability;

11. High integrity

12. Communication;

Contractor should also meet the following desirable requirements:

1. Certified CHECK team member/leader or equivalent (Crest or TIGER or SANS GPEN or GXPN);

2. Published security research/vulnerabilities (possibly with CVE attribution) or winner of CTF/bug bounty programs;

3. Tools Development (Shell Scripting, Python, Ruby, etc)

4. Social Engineering skills;

5. Exploit development experience and ability to defeat protection mechanisms;

Requested skills, competencies and toolset knowledge:

Knowledge of computer system vulnerabilities

Knowledge of vulnerability assessment tools

NS/SC or CTS clearance

Perform NATO level 3-4 CIS vulnerability assessments/penetration tests

Network, system and (web) application security testing

Is a Certified Ethical Hacker.

Skills, knowledge, experience required (Previously in Statement of Work):

- Ability to conduct penetration testing techniques, including Scripting, exploitation and take over;
- Ability to define and scope penetration testing requirements;
- Web application penetration testing
- Network penetration testing
- Source Code assessment skill

. Duties/role (Previously in Statement of Work)

- Performing penetration testing and vulnerability assessments, in support of NATO projects
- Provision and management of vulnerabilities/countermeasures information;
- Pre-production security evaluation