Contract Penetration Tester - Web Application Location: Brighton/UK-basedEngagement: ContractIndependent testers and specialist security firms welcome We''re looking for an experienced penetration tester or specialist security testing firm to conduct an independent penetration test of a Laravel/PHP web application with a significant API component. Scope The engagement will cover: Web application penetration testing API security testing Authentication and authorisation Infrastructure and cloud configuration Identification and exploitation of relevant vulnerabilities Clear, actionable remediation recommendations Retesting following remediation Required Crest CRT/CCT or OSCP Crest CHECK status is a strong advantage Demonstrable experience testing web applications and APIs Final report must provide evidence suitable for DSP Toolkit and DTAC requirements Ability to provide a professional remediation and retest process Brighton-based opportunity, with UK-wide applicants welcome. ..... full job details .....