Information Security Analysis Specialist (Infrastructure Pentester)/RedTeam

Responsibilities:

• RedTeam/Pentesting of network perimeter, domain, and payment infrastructure (blackbox, greybox, whitebox);
• Wireless network security analysis;
• Optimization and enhancement of information infrastructure and network security levels
• Monitoring the market for current information security threats
• Participation in R&D projects

Requirements:

• At least 2 years of experience as an infrastructure pentester
• Excellent knowledge of at least one programming language (go, java, python, php) and the ability to read and analyze source code in common programming languages.
• Confident command of infrastructure pentesting methodologies.
• Excellent knowledge of network protocols (TCP/IP), attacks on them, and bypassing protection mechanisms.
• Skills in penetration testing and vulnerability finding with report delivery
• Confident command of specialized software and frameworks for conducting various types of testing (Burp Suite, Metasploit, PowerSploit, BloodHound, Cobalt-Strike, Impacket)
• Experience in administering *nix and Windows systems, web servers.
• Knowledge of virtualization (ESXi, Hyper-V) and containerization (Docker, Kubernetes) technologies, as well as attacks on them.
• English language – at least intermediate level (Reading technical literature)

Will be a plus:

• Practical security certification (OSCP/OSCE/OSEP/GWAPT/GPEN etc.)
• Participation in CTFs (task-based or attack-defense) and completion of special labs (standoff365, hackthebox, pentester academy)
• Experience in comprehensive security analysis of payment infrastructures and remote banking services
• Participation in Red Team

Conditions:

• Salary conditions are discussed upon completion of the interview. We are looking for several colleagues at once.
• Work mode office\Hybrid\remote are discussed upon completion of the interview.
• We have 2 co-working spaces in Altai and Sochi available for work once a year.
• Immersion into AI culture – we interact with artificial intelligence on an ongoing basis and train newcomers in this, providing free AI assistants;
• Standard + large company benefits: VHI, training, opportunities to participate in various company-wide activities from D&D to marathons.
• Sovcombank Platinum Employer according to Forbes and Highest Category Employer according to RBC.