VULNERABILITY ASSESMENT & PENETRATION TESTING

Talent We Are Looking For
We require an experienced VAPT/Penetration Testing Consultant to assess an AWS-hosted Hospital Management Information System within four to five working days.
Scope and deliverables:
• Test one HMIS web application, one API, one SQL database and one Windows Server.
• Conduct black-box, grey-box and white-box testing.
• Review AWS security configuration, encryption, hashing, access controls and code/data integrity.
• Perform manual testing supported by appropriate automated tools.
• Deliver an executive summary, detailed technical report, evidence, risk ratings, remediation recommendations and one retest.
Required skills:
• Strong web application and API penetration-testing experience.
• SQL database and Windows Server security expertise.
• Practical AWS cloud-security assessment experience.
• Knowledge of OWASP, PTES, NIST and CVSS.
• Ability to produce clear, professional customer-facing reports.
• OSCP, CREST, CEH or equivalent practical credentials are desirable.
Professional expectations:
The consultant must demonstrate high integrity, confidentiality and responsible handling of healthcare information. They must communicate clearly in English, provide regular progress updates and escalate critical findings immediately.
How we work:
We work within a signed scope and Rules of Engagement, maintain strict testing boundaries and prohibit destructive testing. The consultant will collaborate with our project lead, submit evidence for quality review and meet the agreed four-to-five-day delivery timeline.