SAP Application Security Tester
SAP Application Security Tester
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Location: Spring Texas (OnSite)
Job Type: Long Term Contract
Need only local to Houston TX
Description:
Client is looking to bring on an experienced application security testing contractor to supplement internal efforts. Candidate should have all of the following technical and professional characteristics as well:
- Min 2 years experience penetration/vulnerability testing for web and thickclient applications in an enterprise environment
- Strong understanding of web technologies e.g. HTTP HTML CSS Forms Database Connectivity etc.
- Understanding of compliance and regulatory requirements such as PCI DSS SOX HIPAA etc.
- Full grasp and ability to articulate and/or train others on the OWASP Top 10 and related concepts
- Minimum 1 years experience with programming and/or scripting in one or more of the following languages: .NET Java PHP Ruby Perl Bash or similar language
- Minimum 1 years experience with SQL including a strong understanding of SQL syntax and the ability to perform basic management of MS SQL databases
- Ability to perform manual web application vulnerability assessments without the use of automated tools such as web application scanners
- Ability to capture and analyze network traffic including ability to discern whether said network traffic contains vulnerabilities and/or sensitive data
- Have a solid grasp of core security fundamentals and concepts including knowing ones system defense in depth the principle of least privilege access control encryption and cryptography security architecture and design business continuity and disaster recovery etc.
- Minimum 3 years experience with enterpriselevel security control implementations including Network Intrusion Detection/Prevention (NIDS/NIPS) Corporate Antivirus Enterprise Web Filtering Data Loss Prevention Insiderthreat Mitigation Botnet Detection etc. as well as demonstrable knowledge of the principles and techniques used to bypass said controls.
- Ability to create extremely high quality written reports containing the findings from web and thickclient vulnerability assessments as well as the ability to articulate those findings to peer technical staff as well as various levels of management
Required Experience:
Senior IC
Employment Type
Contract
