What you will be doing** -Conducting penetration testing of web applications, APIs, networks, infrastructure, Active Directory, and other systems. -Identifying vulnerabilities using both automated tools and manual testing techniques. -Validating found vulnerabilities, confirming their real impact, and excluding false positives. -Assessing vulnerabilities from the perspective of common attack techniques and security risks. -Providing clear and practical recommendations for vulnerability remediation to Development and IT teams. -Preparing structured reports on penetration testing results for internal stakeholders and clients. -Conducting re-testing after vulnerabilities have been remediated. -Participating in the improvement of internal security testing approaches and methodologies.

What we expect -3+ years of practical experience in penetration testing, ethical hacking, or offensive security. -Strong knowledge in: Web Application, Penetration Testing, API Security Testing, Network Penetration Testing, Active Directory Security Testing. -Practical experience with tools such as Burp Suite, Nmap, Metasploit, Nuclei, and similar. -Ability to manually verify vulnerabilities and distinguish real security issues from false positives. -Good understanding of OWASP Top 10 and common attack techniques. -Experience in preparing technical reports on penetration testing results. -Ability to clearly explain security findings to both technical and non-technical stakeholders.

What we offer: -Remote work format (WW, excluding Russia). -Schedule: full-time, 5/2. -Probationary period of 3 months.

📩 Contact for application: @rec_atss