We use cookies — so the site works and to count visits. By pressing "Got it" you also allow Webvisor session recording. Details and how to opt out
X5 Tech
Russia
Penetration Testing Specialist (Pentest)
2 months ago
Contacts
Reach out directly about this role
Details
Grade
Middle
Work Format
Remote, Hybrid
Average salary for this role
By country
143,750RUBper month
109,167245,833
country: Russia
A cover letter in a minute
AI writes it from your resume. You only have to send it.
Description
Responsibilities:
Penetration Testing and Security Assessment: Conducting automated and manual penetration testing of internal and external services (internal network/infrastructure vulnerabilities, Web, API, network segments).
Security Automation and Security Tooling: Developing and maintaining automation scripts (Python, Go, Bash) for orchestrating security scanners and processing their results.
DevSecOps Tasks and Kubernetes Security: Auditing and hardening Kubernetes clusters: configuring RBAC, Network Policies, Pod Security Standards/OPA Gatekeeper, restricting privileged containers.
Vulnerability Management as an internal service.
Interaction with SOC/Blue Team for transferring indicators of compromise (IoC) and clarifying incident details identified during pentests.
Requirements:
Experience and knowledge of tools from Kali Linux/Parrot Security, Burp Suite, Metasploit, Nmap.
Proficient in Python/Bash for automation.
Understanding of K8s architecture (etcd, kube-apiserver, CNI).
Knowledge of network protocols and modern web vulnerabilities (OWASP Top 10, OWASP API Security Top 10).
Ability to balance between "breaking" and "building" — not only finding vulnerabilities but also helping to fix them.
Client-orientation when working with internal clients.
Independence in solving medium-complexity tasks with escalation of complex cases to Senior/Lead.
Conditions:
Convenient office with parking near "Volgogradsky Prospekt" metro station / MCD "Kalitniki", hybrid schedule/remote work.
Work schedule: 5/2, from 9:00 to 18:15 (on Fridays — until 17:00).
Opportunity for training and certification at the company's expense: external training and seminars on professional topics, industry conferences, management skills development program, in-person masterclasses, online education platforms, and much more.
Developed system of compensation and benefits.
Comprehensive DMI package (including travel abroad and dental care).
Life and health insurance.
Discounts in X5 retail chain stores ("Pyaterochka", "Perekrestok").
PrimeZone privilege program (discounts on goods and services and special offers from partner companies).
Financial assistance to employees in difficult life situations.
Employment according to the Labor Code of the Russian Federation with an official salary.
Kali LinuxParrot SecurityBurp SuiteMetasploitNmapPythonBashGoKubernetesRBACNetworkPoliciesGatekeeperetcdkube-apiserverCNIOWASP Top 10OWASP API Security Top 10