Описание
Innowise has delivered more than 1,600 projects for clients worldwide.
Задачи
•Perform penetration testing and vulnerability assessments of web applications and APIs
•Document identified vulnerabilities and provide clear, detailed remediation recommendations
•Support product owners and development teams in vulnerability remediation
•Apply security testing methodologies such as OWASP WSTG or equivalent application security frameworks
•Assess common web application vulnerabilities, including XSS, SQL Injection (SQLi), and SSRF
•Analyze vulnerability types, root causes, exploitation techniques, and remediation approaches
•Use application security testing software and penetration testing tools such as Kali Linux, Burp Suite, Metasploit, Nmap (NSE), and Acunetix
Требования
•Experience in mobile application penetration testing
•Experience in infrastructure penetration testing
•Comprehensive understanding of the Secure Software Development Lifecycle (SSDLC)
•Previous participation in bug bounty programs and/or Capture The Flag (CTF) competitions
•Relevant certifications such as BSCP, CWES, eMAPT, eWPT, OSCP+, or equivalent
•English proficiency at B1+ level or higher
Будет плюсом
•Additional certifications such as OSCP or CEH
•Knowledge of modern AI tools and practical experience using them in daily work
Условия
•Flexible work schedule
•Financial assistance
•Medical insurance
