Locations: Almaty (Kazakhstan), Limassol (Cyprus), Tbilisi (Georgia), Yerevan (Armenia).
Salary: from $5,000/month before taxes.
What you will be doing
- Conducting penetration tests of web applications, APIs, internal and external infrastructure, cloud environments, and Kubernetes clusters.
- Performing security analysis and identifying vulnerabilities in products, infrastructure, and cloud services.
- Simulating real attack scenarios.
- Participating in Red Team activities and offensive security initiatives.
- Assessing the security of cloud services, CI/CD pipelines, container infrastructure, and Infrastructure as Code solutions.
- Working with Bug Bounty programs.
- Researching new attack techniques, vulnerabilities, and attacker tactics to enhance the company's security posture.
- Collaborating with infrastructure and product teams, helping to implement measures to address identified risks and vulnerabilities.
What we are looking for
- 4+ years of experience in Offensive Security, Penetration Testing, or Red Team.
- Experience conducting penetration tests of web applications, APIs, cloud environments, and internal infrastructure.
- Deep understanding of modern attack techniques, kill chains, and attacker behavior.
- Experience assessing the security of Kubernetes and containerized environments.
- Understanding of cloud security principles.
- Understanding of network security, authentication mechanisms, and access control.
- Experience working with Linux and understanding security hardening principles.
- Knowledge of CI/CD security approaches and Infrastructure as Code technologies (Terraform, Helm, etc.).
- Automation and scripting skills in Python/Go, Bash.
- Understanding of modern information security methodologies and frameworks: OWASP, MITRE ATT&CK, PTES, ASVS, and others.
- Experience participating in Bug Bounty programs.
- Willingness to work in one of our offices: Almaty, Tbilisi, Yerevan, or Limassol.
What we offer
Growth and Development
Our project is actively developing, as is the team creating it. We invest in the growth of each specialist and regularly review salaries based on performance. Moreover, we have a promotion system that allows specialists to prove themselves in more responsible positions.
Comfortable Conditions
Work format: office or hybrid. Flexible schedule with the ability to take day-offs without unnecessary bureaucracy.
Employee Care
Sick days without loss of pay, assistance in difficult life situations, minimal bureaucracy and processes for the sake of processes.
We carefully consider every application and will definitely contact you if your profile matches the role's tasks. If you do not receive a response within 14 calendar days, it means we are not ready to proceed with communication on this position at this stage. We would be happy to consider you in the future — keep an eye on our vacancies.
