Security & Penetration Testing Provider

Job Description

The Security & Penetration Testing Provider will conduct independent security risk assessments and penetration testing of the rebuilt Medical Cannabis Patient Registry, Patient Portal, authentication mechanisms, integrations, and sensitive-data protections.

Required / Preferred Experience

• 10+ years of security assessment and penetration-testing experience.
• Government and healthcare security experience preferred.
• HIPAA and NIST 800- Rev. 5 knowledge.
• Web application and Oracle APEX security.
• Identity and access management security.
• Qualifications and certifications subject to GDPH approval.

Key Technical Skills

Penetration testing, NIST 800- , NIST 800- , OWASP, CWE/SANS Top , vulnerability assessment, MFA security testing, HIPAA, risk assessment, authentication testing, application security, security reporting, and retesting.

Key Responsibilities

Conduct independent risk and impact assessments, application and interface penetration testing, MFA and authentication-security testing, identify vulnerabilities, assign severity ratings, document evidence, recommend remediation, verify corrective actions, perform retesting, and submit final security assessment reports before production release.