Job details

SC2024-003981 Penetration Testing Services (NS) - THU 23 Jan

Deadline Date: Thursday 23 January 2025

Requirement: Penetration Testing Services

Location: Off-Site

Note: Please refer to your Subcontract Agreement, article 6.4.1.a, which states “Off-Site Discount: 5% (this discount is applicable to all requirements, and applies when the assigned personnel are permitted to work Off-Site, such as at- home)". Please be sure to price this discount in your overall price proposal when submitting bids against off-site RFQs

Total Scope of the request (hours): 836

Required Start Date: 10 March 2025

End Contract Date: 31 December 2025

Required Security Clearance: NATO SECRET

Duties and Role:

The duties of the individual mainly focus on:

Provide Web and application level penetration testing;
Provide security design reviews to ensure compliance with NATO policies and directives;
Provide security consultancy and advice to projects, plans, and other entities;
Brief at technical levels on security reports and testing outcome

Skill, Knowledge & Experience:

The candidate must have a currently active NATO SECRET security clearance

The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas:

Web application and thick-client penetration testing;
Assessing security vulnerabilities within OS, software, protocols & networks;
Researching and evaluating security products & technologies;
Knowledge in system and network administration of UNIX and Windows systems;
Use of penetration testing tools, techniques, and recognized testing methodologies;
Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);
Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies;
Ability to evaluate risks and formulate mitigation plans;
Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan.

What You Should Know About SC2024-003981 Penetration Testing Services (NS) - THU 23 Jan, EMW, Inc.

Are you an experienced penetration tester looking for an exciting opportunity to showcase your skills? If so, we invite you to apply for the SC2024-003981 Penetration Testing Services position with our team. This off-site role allows you to work flexibly from home while contributing to critical security assessments. As a key player in this project, you'll provide web and application-level penetration testing, conduct security design reviews to ensure compliance with NATO policies, and offer invaluable security consultancy to various projects. Your expertise in identifying security vulnerabilities across operating systems, software, and networks will be essential, and you'll be expected to brief technical teams on your findings clearly and effectively. With the required NATO SECRET security clearance and at least five years of experience in penetration testing, especially with web applications, your technical skills will shine as you employ a variety of tools and methodologies to evaluate risks and craft mitigation strategies. Join us as we prioritize cybersecurity and uphold the highest standards in our industry. Your ability to deliver succinct technical reports will be vital, enabling stakeholders to understand complex issues effortlessly. Don't miss this chance to contribute to significant projects and grow within a supportive environment where your input matters.

Frequently Asked Questions (FAQs) for SC2024-003981 Penetration Testing Services (NS) - THU 23 Jan Role at EMW, Inc.

What are the key responsibilities of the SC2024-003981 Penetration Testing Services position?

The SC2024-003981 Penetration Testing Services role involves conducting both web and application-level penetration testing, providing security design reviews to ensure compliance with NATO policies, and offering security consultancy to projects. Additionally, you'll be responsible for communicating technical findings and remediation strategies through clear reports.