Build .NET Core E-Commerce

Project Description

Recently we completed an independent penetration test conducted by a professional cybersecurity firm. The assessment identified a number of security vulnerabilities that require remediation to strengthen the security of our applications and ensure compliance with industry best practices.

We are looking for an experienced Application Security Consultant / Security Engineer to work closely with our in-house development team at our Mumbai office to address these findings.

Our technology stack primarily includes .NET, ASP.NET, and React for the frontend.

Scope of Work
Review the penetration testing report and prioritise identified vulnerabilities based on risk.
Guide and assist our development team in implementing secure coding practices and remediating the identified issues.
Improve authentication, authorisation, session management and token-based security mechanisms where required.
Strengthen data protection controls to ensure sensitive information is securely handled, stored and transmitted.
Review API security, input validation, encryption, access controls and other application security measures.
Ensure the application aligns with OWASP recommendations and recognised secure development practices.
Work closely with the development team throughout the remediation process and provide technical guidance where necessary.
Assist in validating that all identified vulnerabilities have been effectively addressed before the final security assessment.
Project Outcome

Once the remediation work has been completed, the application will undergo a repeat penetration test by the independent security firm to verify that the identified vulnerabilities have been successfully resolved and that the platform meets the required security standards.

The consultant is expected to work onsite from our Mumbai office and collaborate directly with our technical team until the project is successfully completed.