Address
Form of work
SalaryThe following is an overview of the Thick Application Penetration Test:
- Will evaluate the application for security vulnerabilities from the perspective of an authenticated user. If multiple user types exist, then will perform testing using each type. During the testing, manual and automated processes leverage commercial, open source, and proprietary software. All automated tests will be manually verified to minimize false positives.
- The penetration test will target common thick application attack vectors such as the file system, the registry, system memory, network communications, and graphical user interfaces.
Specific areas of focus will include, but are not limited to:
Static Analysis: During the static analysis phase of testing, will review the follow areas:
- Service account roles and permissions (client, application server, database server)
- Application file, folder, and registry permissions
- Application service, provider, WMI subscription, task, and other permissions
- Assembly compilation security flags
- Protection of data in transit
- Hardcoded sensitive data and authentication tokens (passwords, private keys, etc.)
- Hardcoded encryption material (keys, IVs, etc.)
- Use of insecure encryption and hashing algorithms
- Database user roles and permissions
- Database and server configurations
Dynamic Analysis: During the dynamic analysis phase of testing, will test and review the following areas:
- Authentication and authorization controls enforced on the client and server
- Application user roles and permissions
- Application workflow logic between GUI elements
- Web Services utilized by the application using web application testing methodology
- File system changes including file and folder creation, deletion, and modification
- Registry changes including creation, deletion, and modification of keys and values
- Application objects and information stored in memory during runtime
- Use of insecure encryption and hashing algorithms
- Network protocols utilized by the application (SMB, FTP, TFTP, etc.)
- Database connections
After identifying the strengths and weaknesses of the thick application(s) and Client's development and security program processes, will suggest strategies for improvement and assign priority to deficiencies based on potential business impact and likelihood of process failure or exploitation. Will also collaborate with stakeholders so that notable findings may then be analyzed and compared against program goals and compliance requirements.
Senior Software Engineer (.NET C#) -South-West London- up to £65k company benefits including hybrid working, bonus, private healthcare, 26 days holiday bh, flexible working hours, excellent career progression & training, huge company discounts & more!
A well-established marinecompany is looking for skilled Software Engineers to join their successful and fast-growing team. This opportunity will see you build an established career whilst using the latest technology and developing upon your personal and professional development.
The Role
As a Senior Software Engineer, you will be developing software across the full suite of the company's products and services whilst taking part in all stages of the software development lifecycle. You will be working in a close-knit, highly collaborative, and continuously improving team amongst various industries. You will also be given the responsibility of leading agile ceremonies such as stand-ups, planning meetings and retrospectives, along with participating in code reviews and working on full-cycle software development.
Your specialist technical skills will give support to colleagues and help deliver projected results. You'll have a plethora of autonomy so it would be perfect if you are passionate about sharing ideas and learning new skills. Working with the latest technologies at large, this role is for the technically capable, driven, and ambitious developer.
Requirements
- C#, .NET
Desirables
- SQL
- Azure
The Company
This company is a global provider of navigation solutions and is world-renowned for the services they provide. They provide intelligent multichannel solutions to numerous clients that they work with worldwide, ranging from Europe to Australia. The company is based in South-west London and working arrangements are flexible e.g. hybrid or occasional trips into office for meetings. They have incredible company benefits such as 26 days holiday plus bank holidays with private healthcare, flexible working hours, exclusive discounts, excellent career progression and much more.
HOW TO APPLY!
If you are an experienced Developer that is ready to take that next step in your career and feel valued by your company, this one is for you. Interviews are commencing this week so waste no time and apply now.
Senior Software Engineer (.NET C) -South-West London- up to £65k company benefits including hybrid working, bonus, private healthcare, 26 days holiday bh, flexible working hours, excellent career progression & training, huge company discounts & more!
Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy.
To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.
