Software Pentester

This is a fully remote position, open to applicants in Poland.

📋 Description

• Protect software applications and infrastructure against potential vulnerabilities and cyber threats.

• Lead the development of product privacy and cybersecurity features and improvements.

• Evaluate architectures and designs for security weaknesses.

• Recommend and implement suitable security alternatives.

• Supervise the management and resolution of identified security issues within development platforms.

• Create and sustain monitoring, auditing, and reporting frameworks that generate artifacts supporting security and compliance requirements.

• Conduct vulnerability assessments and penetration testing for various R&D applications.

• Apply DevSecOps principles across the product range.

• Incorporate SAST and DAST tools into CI/CD pipelines.

• Operate in a dynamic, fast-paced Agile environment that is highly competitive.

⛳️ Requirements

• Minimum of 8 years of experience in software application penetration testing.

• Familiarity with the DevSecOps framework.

• Knowledge of NIST, OWASP, MITRE, CWE, and other related standards/frameworks.

• Proficiency in programming languages such as C#, Perl, JavaScript, Python, and/or PHP.

• Understanding of TCP/IP, common networking ports and protocols, and the OSI model.

• Knowledge of threat modeling and risk assessment techniques.

• Current awareness of cybersecurity threats, best practices, and the latest software developments.

• Familiarity with tools such as HP Fortify, Puppet, Chef, ThreatModeler, Checkmarx, Aqua, Kubernetes, and/or Docker.

• Experience with security assessment tools like NESSUS, NMap, BurpSuite, ZAP, OWASP tools, Kali Linux tools, and fuzzing tools.

• Extensive knowledge of security best practices for client-server product architectures, particularly in cloud-based server development.

• Knowledge of one or more SSO methodologies: SAML, LDAP, or OpenID.

• Experience in extracting relevant security data from SIEM solutions and AWS audit logs and reports.

• In-depth product knowledge to assess privacy and security risks related to product functionality, operating environment, and interoperability.

• Bachelor of Technology or Master of Technology in Computer Science, Information Technology, Electrical Engineering, Electronics and Communication, or Electronics and Instrumentation.

• CEH or OSCP certification is preferred.

• Successful candidates must complete and pass a thorough background check.

• Proof of work authorization may be required as part of the background check.

🏝️ Benefits

• Equal Opportunity Employer committed to an inclusive culture.

• Comprehensive background check conducted in accordance with local regulations.

• Work environment where employees are treated with dignity and respect.

• Emphasis on diversity and expertise.