Title: Intern in the Security Analysis Team
Company: Kaspersky Lab
Location: Moscow
Experience: No experience
Your responsibilities will include:
Performing various types of security analysis for web applications and participating in the development and support of tooling for penetration testing and RedTeam projects, including:
- Security analysis of the company's internal and external services using the OWASP WSTG methodology (black/gray/white box testing);
- Preparing recommendations (writing reports) to improve security levels based on the results of conducted work;
- Participating in penetration testing and RedTeam projects as a specialist in the development and support of tooling used by colleagues;
- Research in the field of information security, testing PoCs, developing your own competencies.
We expect from you:
- Work experience/practice in practical web application security analysis;
- Work experience/practice in development and automation using Python (required), Bash, Ansible, Terraform (desirable), Go, C#, and others (additional);
- Proficiency with essential web application security analysis tools (specifically, BurpSuite Pro with various plugins);
- Working with exploits, modifying and executing them;
- Knowledge of security analysis methodologies (PTES, MITRE ATT&CK, OWASP WSTG);
- Knowledge of systems and technologies used in the corporate environment and attacks against them;
- Knowledge of network protocols and authentication and authorization protocols of various systems;
- Ability to read and analyze source code in common programming languages;
- Technical English.
