Senior Application Security Engineer (offline)

Our format of the job is a consultancy for different projects and technologies, timelines. We do Security for everything.

YOU ARE
— Understanding of common penetration testing frameworks (PTES, OSSTMM, NIST)
— Showing a concept of network protocols, design and operations
— Practical understanding of web application security issues (e.g. OWASP Top 10)
— Able to read and understand source code (Java, .NET, PHP, C, C#, Python, Ruby, JavaScript, etc)
— Hands-on with implementing application-level requirements from at least one compliance standard (PCI DSS, HIPAA, etc)
— Experienced with Android and IOS mobile application security testing
— Familiar with different web technology stacks and frameworks from the security perspective (Java/JBoss/Apache Sling/.NET/RoR/IBM Web Sphere)
— Possessing working knowledge of common security tools (Metasploit, Cobalt Strike, mimikatz, Nmap, fuzzers, Burp Pro, Acunetix, Nessus Pro, Wireshark, Powershell Empire, etc)
— A holder of good understanding of cryptography concepts and protocols
— An owner of Professional Cybersecurity Certifications (CEH, OSCP, OSCE, CREST, GIAC, CISSP, CISM, CISA, etc)
— Demonstrating Intermediate Strong+ English level

YOU WANT TO WORK WITH
— Web and Mobile applications assessment
— Network and host layer vulnerability assessment
— API assessment
— Threat modeling and Risk assessment
— Blackbox, Greybox, Whitebox manual penetration testing
— Compliance checks and pre-audit activities
— Establishing Secure SDLC on the project
— Gathering technical and business requirements, maintaining communication with the customer and internal parties
— Testing results and remediation plan presentation

TOGETHER WE WILL
— Learn about the Client business and their domain
— Enjoy flexible working hours
— Take part in internal and external events where you can build and promote your personal brand
— Give you access to experienced specialists willing to share their knowledge
— Care about your individual initiatives, just come and share your ideas
— Make you familiar with our structured career path and development opportunities