Seeking to fill the requirement for Sr. Network Engineer in an enterprise computing environment that is built upon a secure infrastructure utilizing Checkpoint and Cisco architecture. This Work Order defines the scope and high-level tasks expected to provide technical penetration testing of the client's secure environment . Network and Web Application Penetration Testing - provide both network and web application penetration testing services. The purpose of this web-application penetration test is to review the client's external presence on the Internet and identify weaknesses on the client's Applications that pose threats from hackers over the Internet, and develop recommendations to mitigate or address any identified potential issues that hackers may exploit. Methodology of penetration tests should use an iterative, four-phased approach employing techniques and guidelines from the Open Web Application Security Project (OWASP) Top 10 Project and the NIST SP 100-115 Information Security Testing and Assessment standard. This testing method includes activities to pinpoint vulnerabilities at each operational layer of the target network, aimed to identify critical weaknesses inherent to web applications, many of which are outlined in the OWASP Top 10 Web Application Vulnerabilities Project. Using a combination of automated tools and manual techniques, thoroughly assess systems to identify exploitable vulnerabilities which could be used by cyber threat actors. Deliverables for each network and web application engagement, deliver a written report detailing each vulnerability type discovered along with a risk rating of low, medium, or high. Reports include specific details for each vulnerability found including: how the vulnerability was discovered; the potential impact of its exploitation; recommendations for remediation; vulnerability references. - provided by Dice Networking, Cisco, testing, web, security, penetration