Web Services Penetration Tester

Endeavour Recruitment has an exciting opportunity for a skilled Penetration Tester with Web Services experience for a 12 month Contract in Brussels, Belgium.

The role focus's on testing and evaluating the security of web services. That will include creating and executing a security testing plan, reporting the found vulnerabilities and recommending how to fix them.

In general, the following activities are expected to be executed by the new team member:

-Hands on security testing/reverse engineering (a.k.a. penetration testing)
-Development of helper security verification tools
-Performing security design reviews of Web applications and network/cloud deployments
-Security code reviews of Web applications and/or Web API
-Documentation of knowledge and findings in the form of guidelines, checklists and examples to be used by development teams

The candidate needs to have the following profile/experience:

- Deep knowledge of web technologies and vulnerabilities: HTML5, PHP, JavaScript, CSS, XML, JSON, jQuery, TomCat, etc
- Practical knowledge of OWASP
- Good knowledge of network protocols and network protection techniques (Firewalls, filtering, other) and methods to attack them
- Experience with Python, Java, and/or SQL
- Experience with Shell Scripting
- Extensive experience with pentesting Web Services
- Experience with network and web scanning tools like Qualis, Nessus, Acunetix, or Appscan
- Excellent analytical skills and ability to think out of the box
- Experience with both Linux and Windows OS
- Experience with doing security reviews of architectures, designs and code with the purpose of finding security flaws and/or risk full coding approaches
- Strong command of English
- Excellent communication and writing skills

For further information regarding this exciting role, please don't hesitate to apply.