IT Security Engineer / Penetration Tester

We are looking for an experienced IT Security Engineer/ Penetration Tester to join our Red team in Sofia.

You will need to:

• Troubleshoot application defects and vulnerabilities
• Perform Manual tests, User Acceptance Tests (based on standard OWASP or other)
• Participate in security investigations and compliance reviews, as requested by internal or external auditors
• Research and assess new threats and security alerts, and recommend remedial actions
• Provide guidance for security activities in the system development life cycle (SDLC) and application development efforts
• Identify security issues and risks and develop mitigation plans
• Write detailed bug reports and track bugs through their lifecycle
• Promptly react to any identified weaknesses
• Participate in security compliance efforts

Requirements

To succeed in this role you should have:

• Higher education
• Excellent knowledge of English
• High sense of responsibility
• Ability to work in a team
• Proven experience and detailed technical knowledge in security engineering, systems and network security, authentication and security protocols, cryptography, and application security
• Experience in infrastructure and application-level vulnerability testing and auditing
• Detailed knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits
• Web application development and source code review experience.

We will appreciate:

• Development experience, particularly in scripting languages such as Scala, Perl, Java or PHP.
• OSCP/OSWE or other related penetration testing certifications.
• Hands on experience with CTFs