Position: SecOps
Company: Covent IT
Experience required: 3y
English level: upper

USA-based Cyber security Integrator is seeking consultants to provide assistance in the verification and validation verification and validation of vulnerabilities within web and mobile applications within cloud infrastructure. 


Experience working with mobile, medical and IoT device hardware, including familiarity with jailbreaking is required.

 You will be able to develop testing plans for target applications that confirm the existence and successful remediation of previously identified vulnerabilities and identify any related vulnerabilities. 

The candidate must have excellent written and verbal communication skills, attention to detail and the ability to work independently to tight deadlines. 

a. The key objectives of the engagement are:
i. Application Security Engineering - Planning and Execution
1. Testing plan development, execution and training 
             -Validate discovered vulnerabilities within web, mobile and various cloud platforms
             -Work with development team to create testing plans
             -Work within Testrail and Jira for tracking of various tasks
ii. Coach, advise, teach, and train on security and security testing work for the client
iii. Consult and assist in the implementation and integration of security tools into the application lifecycle
b. The Services to be performed hereunder are described in 1.a. The obligations set forth shall be binding upon Service Provider and shall be performed in accordance with the terms and conditions of this Project Assignment and the Agreement.
c. The Services to be performed hereunder are to be performed by the levels of staff as specified by Client. 
Common tools the consultant should be familiar with include: 
• Burp
• OWASP ZAP
• postman
• Frida
• MobSF
• Objection
• Cutter
• plitutil
• SQLite
• Drozer
• ADB
• JADX-GUI
• APKtool