Hello! We are SPETSPO, an accredited IT company from St. Petersburg in the field of information security. We are expanding our offensive security team and are looking for individuals ready to grow with us. It doesn't matter if you have a couple of years of commercial experience or are just finishing your studies — the most important thing is that you are passionate about the field and not afraid of complex challenges.

Who We're Looking For

No commercial experience is okay, but you must have practical experience: pet projects, CTFs, sample analysis, your own Windows utilities. Something you can show.

What You Should Have

• Proficient C, understanding of memory, pointers, stack, and heap
• Basic C++ (RAII, user-level templates)
• Experience with WinAPI: processes, memory, files — you've written something yourself
• Ability to read x86/x64 in IDA / Ghidra / Binja — not necessarily writing from scratch, but understanding what a piece of code does
• Understanding of the PE format: sections, imports, how a binary is loaded
• GitHub or any code that can be reviewed

Will Be a Plus

• CTF (especially reverse, pwn), CVEs, talks, articles
• Familiarity with MASM, LLVM, EDR evasion techniques at a "read about it" level
• .NET / C# for assembly loaders

We develop production-grade tools for Windows: loaders, payloads, post-exploitation. This involves using WinAPI / NtAPI, syscalls, EDR bypass, MASM inline assembly, custom LLVM passes, and reverse engineering actual malware samples to borrow techniques. In the first few months, you'll work under a mentor, and then you'll develop your own modules.

What We Offer for Growth

Paid courses according to our plan: Maldev Academy, Sektor7 RED/MalDev, Zero2Automated, followed by OSEP, SANS FOR610 / GREM. IDA / Binary Ninja licenses available upon request.

Conditions

• 200,000–250,000 ₽ net
• Full-time, 5/2 work schedule
• Office near Novocherkasskaya metro station