What you will do** -Conduct penetration testing of web applications, APIs, networks, infrastructure, Active Directory, and other systems. -Identify vulnerabilities using both automated tools and manual testing techniques. -Validate found vulnerabilities, confirm their real impact, and exclude false positives. -Assess vulnerabilities from the perspective of common attack techniques and security risks. -Provide clear and practical recommendations for vulnerability remediation to Development and IT teams. -Prepare structured reports on the results of penetration testing for internal stakeholders and clients. -Perform re-testing after vulnerabilities have been remediated. -Participate in improving internal security testing approaches and methodologies.

What we expect -3+ years of practical experience in penetration testing, ethical hacking, or offensive security. -Strong knowledge in the areas of: Web Application, Penetration Testing, API Security Testing, Network Penetration Testing, Active Directory Security Testing. -Practical experience with tools such as Burp Suite, Nmap, Metasploit, Nuclei, and similar. -Ability to manually verify vulnerabilities and distinguish real security issues from false positives. -Good understanding of OWASP Top 10 and common attack techniques. -Experience in preparing technical reports on penetration testing results. -Ability to clearly explain security findings to both technical and non-technical stakeholders.

What we offer: -Remote work format (WW, excluding Russia). -Schedule: full-time, 5/2. -Probationary period of 3 months.

📩 Contact for application: @rec_atss