Тип вакансії: Повна зайнятість

Розташування:

Зарплата: $4000–$7000

We're looking for penetration tester/vulnerability researcher who passionate about web/cloud security. Our dream is a hacker who goes deeply in the sources of web browsers, HTTP/HTML standards, Kubernetes internals.

Your primary tasks will be:
– vulnerability assessments of web applications
– vulnerability assessments of GCP/GKE infrastructures
– secure code reviews
– penetration testing
– modification and tuning of fuzzing tools
– development of custom rules and modification of code analysis tools
– modification and tuning of cloud infrastructure audit tools
– developing PoC and provide other extended proofs of vulnerability severity level
– providing guidance and training to software development and operational teams
– developing secure coding standards and rules for IDE/CI tools which support that standards
– developing challenges/skills tests for software development teams

We expect from you:
* experience in shell scripting and python programming
* experience with web-application security testing(far behind the OWASP TOP 10)
* experience with security of OpenID/Oauth2/SAML protocols
* experience with parsing code, including AST representations and grammar parsing
* knowledge of common web application architectures

For sure you need:
* Read PHP/JavaScript code
* have an in-depth knowledge of HTTP protocol
* being familiar with Docker, Kubernetes, GCP tools
* know well acronyms and their appropriate use (CVE, CVSS, CWE 🙂
* being a fun of PortSwigger blog
* being a CTF player
* have known pentest certifications (OSCP/CEH/BSCP/HTB CPST or similar)

In addition we expect from you:
* being a strong team player
* effectively communicate findings and remediation approaches
* have ability to take ownership of features you ship
* have interest in the feature/product vision
* being self-learner, strong can-do attitude and great interpersonal skills.
* being comfortable with writing documentation (a lot of documentation)

A big plus is:
– Google Cloud certification
– Kubernetes certification
– Terraform certification
– BigQuery SQL perfect knowledge
– SSO, Oauth2, OIDC, SAML experience

Why work at Pakurity?
* We're a well-funded company from 2014 with several key customers
* We have a pragmatic, ready to change and adopt culture
* We are focused to provide high quality services to our customers and being proactive in their needs
* We have credit of trust from our customers and freedom to choose solutions to address their needs

When you join Pakurity, you can expect:
* Competitive compensation
* Flexible hours and additional study days
* Career growth

In any case if you're passionate about high load/security projects you will be able to grow quickly in terms of financial gain and professional development.

Pakurity is a team of cyber-security professionals. We are based in Ukraine but provide services all over the world. Our core services:
– penetration testing
– incident response
– IT audit
– secure software development trainings

The post Cyber Security Engineer (Vulnerability research and Pentesting for WEB/GCP), Product Security Assurance appeared first on Remote Work Ukraine [Українське].