Penetration Tester
{{item.title}}
About the job
We are looking for a skilled Penetration Tester – Web Applications to join our team. If you’re passionate about cybersecurity, enjoy identifying vulnerabilities, and thrive in collaborating with development teams to strengthen application security, we’d love to connect with you!
Locations
- Suceava / Iași
What you will do
- Perform detailed research on application features to proactively identify potential vulnerabilities
- Conduct regular penetration tests on web applications
- Integrate and manage security checks and scans within CI/CD pipelines
- Collaborate with the development team to determine optimal remediation strategies for vulnerabilities
- Implement and continually refine SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) processes
- Document security findings, processes, and remediation efforts to maintain compliance and support team knowledge sharing.
- Stay updated on emerging threats, vulnerabilities, and security best practices to enhance testing methodologies.
Qualifications - General
- Demonstrated ability to perform white-box and black-box penetration testing on web applications
- Proficiency in Python scripting
- Strong Linux skills
- Experience identifying vulnerabilities by reviewing source code
- At least one year of cybersecurity experience or two years of web application development experience
- Hands-on experience with SAST and DAST methodologies
- Familiarity with OWASP Top 10 (2021)
- Understanding of APIs, distributed systems, and microservices
- Basic knowledge of cryptography
- Familiarity with MVC frameworks
- Effective communication skills to articulate technical findings to both technical and non-technical stakeholders
- Strong problem-solving skills and attention to detail to uncover hidden risks
Advantage
- Knowledge of Windows internals
- Experience with binary exploitation
- Participation in CTF events or competitions
- Background in infrastructure penetration testing
- At least one intermediate-level certification (OSCP, OSWA, eJPT, eCPPT, eWPT, HTB CPTS)
- Cloud platform experience (AWS, GCP, or Azure)
- Exposure to secure software development lifecycle (SSDLC) practices.
Benefits
- 22 days annual paid vacation
- Holiday card
- Meal tickets
- Cultural card
- Health insurance
- Motivating salary package, correlated with the obtained performances
- Flexible working hours
- We provide you with a laptop and all needed to help you get settled and work better
- Working with a wide and interesting portfolio of clients
- Opportunity to build your career path including certifications and training courses
- Standard perks such as free drinks and snacks in the office, team activities, trips and great parties
Join our team
Get to know us and join our team.
We'd love to have more talented people on board!
Please select if you agree to Expertware processing and storing your personal data for a period of 24 months to notify you of any future opportunities.
Note: The processing of personal data will be in compliance with Regulation 679/2016 adopted by the European Parliament and the Council of the European Union to approve the rules on the protection with regard to the processing of personal data and the rules on the free circulation of this type of personal data.
{{uploadedFile.fileName}}
Copyright © 2020 - All Right Reserved.