О компании
HackEthic is a specialized team of information security and cybersecurity professionals delivering offensive and defensive services to a diverse portfolio of clients. From fast-moving startups to privately held enterprises and publicly traded financial institutions, we help organizations design and implement robust ISMS frameworks, conduct comprehensive awareness programs, and execute high-impact penetration testing and red teaming exercises.
Задачи
•Conduct penetration tests across web & mobile applications, APIs, cloud environments, internal/external network infrastructure, and modern AI/LLM-integrated architectures.
•Perform manual exploitation, payload crafting, and complex attack chaining to uncover critical vulnerabilities that automation misses.
•Collaborate directly with engineering and security teams to translate raw findings into prioritized, actionable remediation roadmaps.
•Deliver structured, high-impact assessment reports detailing attack vectors, business impact, and mitigation steps.
•Keep our methodologies ahead of the curve by researching emerging attack surfaces, zero-days, and modern evasion techniques.
Требования
•Minimum 4 years in cybersecurity roles, including at least 2 years of dedicated, hands-on penetration testing experience.
•Strong technical understanding of network protocols, operating system internals, mobile architectures (iOS/Android), and modern web stacks.
•Proven expertise with industry-standard penetration testing tools and frameworks.
•Practical experience leveraging modern AI-assisted tools for code analysis, recon, or scripting, while respecting client confidentiality and data security.
•Professional proficiency in both Georgian and English (written and spoken), with the proven ability to present complex technical findings clearly to both engineering leads and non-technical executives.
•Bachelor's degree in Cybersecurity, Computer Science, IT, or equivalent practical experience.
Будет плюсом
•Hands-on certifications (e.g. OSCP, OSWE, OSCE, GXPN, GPEN, CRTO, CRTP, CMWAPT) are strongly preferred.
•Experience in security research.
•Experience with Common Vulnerabilities and Exposures (CVEs) and bug bounty programs.
•Experience working in a consulting environment, serving a diverse client base across multiple industries.
Условия
•Competitive remuneration
•Flexible working mode
•Budget for professional and personal development
•Opportunity to test sophisticated architectures without repetitive checklist auditing
