Penetration Tester

Anthony James Consulting; Falmer; On-site; GBP 92,000 - 129,000; Full time

Job summary

Anthony James Consulting is seeking an experienced penetration tester or security testing firm to conduct an independent assessment of a Laravel/PHP web application with a substantial API component, based in the Brighton area.

The engagement covers web application testing, API security, authentication and authorisation, infrastructure and cloud configuration, vulnerability identification and exploitation, and providing actionable remediation recommendations with a retest after remediation.

Qualifications

• Experience testing web applications and APIs.
• Ability to provide a professional remediation and retest process.
• Final report must provide evidence suitable for DSP Toolkit and DTAC requirements.

Responsibilities

• Web application penetration testing.
• API security testing.
• Assess authentication and authorisation.
• Evaluate infrastructure and cloud configurations.
• Identify and exploit vulnerabilities with clear remediation recommendations.
• Retest following remediation.

Skills

Web app testing

API security testing

Remediation & retest

Education

Crest CRT/CCT or OSCP

Crest CHECK status

Job description

Contract Penetration Tester - Web Application

Location: Brighton/UK-based
Engagement: Contract
Independent testers and specialist security firms welcome

We're looking for an experienced penetration tester or specialist security testing firm to conduct an independent penetration test of a Laravel/PHP web application with a significant API component.

Scope

The engagement will cover:

• Web application penetration testing
• API security testing
• Authentication and authorisation
• Infrastructure and cloud configuration
• Identification and exploitation of relevant vulnerabilities
• Clear, actionable remediation recommendations
• Retesting following remediation

Required

• Crest CRT/CCT or OSCP
• Crest CHECK status is a strong advantage
• Demonstrable experience testing web applications and APIs
• Final report must provide evidence suitable for DSP Toolkit and DTAC requirements
• Ability to provide a professional remediation and retest process

Brighton-based opportunity, with UK-wide applicants welcome.