Penetration Tester (Web & API)

Навыки

• API (интеграции)
• Внимание к деталям
• Bash / shell
• Burp Suite
• Linux
• Metasploit / Nmap
• OWASP

О компании и продукте

• Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement.
• We are developing a partner advertising high-load system with a large RPS, convenient and modern interface. We are growing exponentially and successfully implementing new technologies to accelerate this growth and the system as a whole.
• Now we look for a Security Engineer to join our team

Задачи

• Conduct penetration testing of web applications, APIs, and infrastructure to identify security vulnerabilities
• Perform manual security assessments and advanced exploitation of discovered vulnerabilities
• Collaborate with engineering and DevOps teams to improve security of applications and infrastructure
• Prepare detailed penetration testing reports with clear technical descriptions and remediation recommendations
• Continuously research new attack techniques, vulnerabilities, and security trends
• Assist in developing and improving internal security testing methodologies and tools
• Support the implementation of secure development practices within the organization
• You’ll thrive here if you have
• Experience in web application penetration testing
• Good knowledge of API and network security testing
• Strong understanding of Linux and web infrastructure
• Experience with common pentesting tools (Burp, Nmap, Metasploit, sqlmap, ffuf, etc.)
• Understanding of authentication, sessions, and common web vulnerabilities
• Experience with manual security testing and vulnerability analysis
• Familiarity with OWASP / PTES / security testing methodologies
• Ability to write clear vulnerability reports
• Professional English proficiency
• Strong analytical mindset with high attention to detail
• Effective communication, collaboration skills, and strong sense of ownership
• That can be a plus
• Experience participating in bug bounty programs
• Experience with automation of security testing using scripting languages such as Python, Go, or Bash
• Experience with container security testing
• Experience in red teaming exercises
• Experience performing infrastructure penetration testing in Linux environments

Как проходит отбор

• HR interview (40 min)
• Technical interview (1.5 hour)
• Final interview (45 min)

Паспорт вакансии

История публикации

Откуда что взялось

Отмечено то, что вывели мы. Без пометки — значение назвал работодатель.

Почему на этом месте в выдаче

Порядок выдачи объявлен контрактом: свежесть решает между днями, полнота и зарплата — внутри дня.