Project Description:
Our company is looking for an experienced freelance pentester to participate in information security projects for our clients.
What needs to be done:
• conduct external/internal penetration testing (VPN, firewall, web, API, DNS)
• web application & API pentest (OWASP Top 10, SQLi, XSS, SSRF, IDOR)
• vulnerability assessment with CVSS scoring and remediation tracking
• if needed: Active Directory assessment, cloud security review (AWS/Azure/GCP)
• prepare an Executive Summary and a detailed Technical Report
Successful Outcome:
• a detailed report describing each vulnerability, severity, and recommendations
• retest after remediation of Critical/High findings
Requirements:
• practical pentesting experience, knowledge of Burp Suite, Metasploit, Nmap
• ability to write technical reports in English
