Penetration Tester

We’re looking for an experienced penetration tester or specialist security testing firm to conduct an independent penetration test of a Laravel/PHP web application with a significant API component.

Scope

The engagement will cover:

• Web application penetration testing
• API security testing
• Authentication and authorisation
• Infrastructure and cloud configuration
• Identification and exploitation of relevant vulnerabilities
• Clear, actionable remediation recommendations
• Retesting following remediation

• Crest CRT/CCT or OSCP
• Crest CHECK status is a strong advantage
• Demonstrable experience testing web applications and APIs
• Final report must provide evidence suitable for DSP Toolkit and DTAC requirements
• Ability to provide a professional remediation and retest process