Security Tester

Will need SC or SC Clearable (5yrs in the UK)
 

• Day rate: Max £550
• Duration: 3+ initially, if things go well this can be extended
• Security Clearance: Security Cleared or Clearable profile is mandatory – can start once BPSS cleared
• Client location is Crewe, but there is no expectation to be in office at the moment. 
• JD is below

What we are looking for:

• Good understanding of the secure software development life cycle (SDLC) and application security concepts
  • Experience in application security testing (Web Services, API), and secure code review.
  • Performing static application security testing (SAST) and dynamic application security testing (DAST).
  • knowledge of identifying CWE Top 25 and OWASP Top 10 vulnerabilities, as well as providing remediation recommendations and familiar with other security best practices
  • Tools: Experience of the tools listed below is a plus, but not required.
    • Secure code review - Checkmarx, HPFortify, HCL AppScan Source edition.
    • Web application vulnerability scanning tools -  HCL AppScan, HP WebInspect, Burpsuite Pro
    • Security testing Opensource tools OWAZP ZAP, Burpsuite Community, etc..  
  • Review and walk-through the security testing engagement summary report with the stakeholders.
  • Should have excellent communication Written, Oral and presentation skills.