Penetration tester (Ethical Hacker) | Ukraine

Brak informacji o wynagrodzeniu

MidZdalnie·KijówFull-time

#471193·Dodano 5 dni temu·10

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

APISecurityTestingAIOWASPBurp SuiteWeb securityTechnical WritingOSWERAGLLM ClaudeCLIPython JavaScript TypeScript BashCloud securityAzure AWS GCP

Podsumowanie oferty

The Penetration Tester will perform client security assessments focused on web applications, APIs, and AI-powered solutions. The role is part of a team that also undertakes mobile and cloud security assessments and improves security testing methods and tools.

Wymagania

Commercial experience in web application and API penetration testing and vulnerability assessment.
Solid understanding of common web vulnerabilities, including OWASP Top 10 and OWASP API Security Top 10, and the ability to identify and exploit them manually beyond scanner output.
Working knowledge of penetration testing methodologies such as OWASP WSTG.
Confident use of Burp Suite and other common web security testing tools.
Basic understanding of LLM-based applications and typical attack surfaces, including prompt injection, insecure output handling, and excessive agency.
Ability to assess the technical risks and business impact of identified vulnerabilities.
Good spoken English and strong reading comprehension for client communication and technical documentation.
Strong technical writing skills, including preparing clear, structured reports, instructions, templates, and guidelines.
Commitment to continuous learning and professional development.
Relevant professional certifications such as BSCP, eWPTX, CPTS, COAE, CWEE, OSWE, or OSAI, or willingness to pursue them.

Nice to have:

Hands-on experience testing LLM-based applications, AI agents, or RAG systems, including familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS.
Experience using AI coding agents such as Claude Code, Codex CLI, Cursor, or similar tools in security-related work.
Experience building AI-assisted testing solutions, including custom prompts and skills, MCP servers, tool integrations, and agentic workflows.
Experience evaluating security tools and AI-driven solutions against real-world targets.
Scripting or programming skills in Python, JavaScript/TypeScript, or Bash.
Experience with source code security reviews.
Hands-on experience in mobile application security testing.
Experience with cloud security testing across Azure, AWS, or GCP.
Knowledge of thick client and network penetration testing or reverse engineering.
Involvement in security research, Hack The Box, CVE discoveries, bug bounty programs, or CTF competitions.

Obowiązki

Perform security assessments and penetration tests for clients, focusing on web applications, APIs, and AI-powered solutions.
Participate in mobile application, cloud security, and other penetration testing engagements.
Identify and validate security vulnerabilities, assess their potential impact, and provide actionable recommendations.
Prepare and validate penetration testing reports, ensuring clarity, accuracy, and consistency.
Communicate security findings to client teams, explain vulnerabilities, and address follow-up questions.
Contribute to internal tools and automation for AI-augmented security testing.
Test and evaluate new security tools and AI-driven solutions.
Help improve internal reporting standards, methodologies, and templates.
Contribute to the shared knowledge base, including testing methodologies, checklists, and vulnerability finding templates.

Benefity

Strong mentorship program with constructive feedback and a personalized development plan.
Continuous learning and professional development opportunities, including training and support for obtaining relevant security certifications.
Dedicated time and opportunities to experiment with and develop AI-augmented security testing approaches.

Deloitte

84 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz