Opportunity for Application Security in Pittsfield, MA

Title                 : Application Security

Location           : Pittsfield, MA

Duration           : 6+ Months

This service will provide following functions for Application security and information protection globally:

·         Conduct application security assessment for all types of applications, internet, extranet, Intranet, mobile, etc.

·         Thorough review of various application architectures and attack vectors on application tier and database tier components.

·         Conduct application vulnerability assessments, penetration testing with usage of applications security tools and source code analyzers.

·         Manage and administer IBM AppScan Enterprise tool for Application assessment and Qualys Dell SecureWorks tool for Database vulnerability management.

·         Web Application Dynamic Scanning using IBM AppScan Dynamic Scanner.

·         Web Application Static Scanning using IBM AppScan Source for Analysis.

·         Manage IBM AppScan GSC component for Web Services vulnerability assessment.

·         Manage IBM AppScan Web Explorer tool for manual exploration of web applications.

·         Manage Virtual Forge Code Profiler tool for scanning SAP ABAP code.

·         Provide secure development standards and practices for the following application languages/platforms: Microsoft .NET, J2EE, SAP ABAP, IOS, Android and Oracle DB/MS SQL Server.

·         Review Web-based solutions developed in HTML5, DHTML, CSS, and JavaScript.

·         Providing fix recommendations for vulnerabilities to software development teams.

·         Adopt one of leading methodologies used in industry like OWASP, CVSS, CWE, OSSTMM and/or SANS-25.

·         Design and develop security controls for applications.

·         Use of Secure Software Development Life Cycle (SSDLC) and IT Processes.

·         Vulnerability Assessment and Penetration Testing.

·         Applications Security Assurance including web and mobile apps.

·         Identify & Remediate Software Vulnerabilities Earlier in the Development Lifecycle.

·         Building Secure Code Policies, Guidelines, & Standards

·         Empower Developers and Architects to Identify & Eliminate Software Vulnerabilities.

·         Detailed and In-depth Application Security Analysis.

·         Threat modeling and Application Design review

·         Reporting Vulnerability assessment and fix recommendations.

·         Securing applications before going into production.

Thanks

Romeo Beckham

VDart Inc.

678-720-3409 | romeo@vdartinc.com