Sber's Security Assessment Department invites professionals to join a team working on enhancing the resilience of large infrastructure against modern cyber threats. The project aims to develop advanced methods and technologies in the field of information security, utilizing the latest advancements in artificial intelligence.
Responsibilities
- Conducting internal offensive cybersecurity activities (Red Team) using the latest achievements in artificial intelligence (AI).
- Participating in the development lifecycle of innovative AI-based solutions for security assessments and vulnerability discovery.
- Automating MITRE ATT&CK tactics, techniques, and procedures (TTPs) for subsequent construction of cyberattack vectors.
- Creating and applying AI agents to bypass rules and settings of information security tools (IS tools).
- Testing existing Offsec-AI solutions.
Requirements
- At least 5 years of experience in pentest and Red Team areas.
- Knowledge in the field of AI/LLM.
- Knowledge and experience working with solutions using MCP, A2A protocols, etc.
- Knowledge and understanding of AI/LLM solution vulnerabilities.
- Experience using/researching AI frameworks designed for conducting pentests and Red Team activities.
- Ability to automate routine tasks (Python, Bash, etc.).
- Expert knowledge and practical skills in one of the specializations (web, network infrastructure, infrastructure software, etc.).
- Knowledge and experience applying security assessment methodologies (PTES/OWASP WSTG/OSSTMM).
- Understanding of the Cyber Kill Chain concept.
- Experience implementing TTPs from MITRE ATT&CK.
- Knowledge of the threat landscape and experience exploiting enterprise vulnerabilities (Active Directory environments, DBMS clusters, virtualized and containerized environments, etc.).
Conditions
- Comfortable modern office.
- Office-based work format.
- Annual salary review and annual bonus.
- Corporate gym and recreation areas.
- Over 400 educational programs from SberUniversity for professional and career development.
- Adaptation program and manager support at the start.
- Extended voluntary medical insurance, preferential family insurance, and corporate pension program.
- Flexible mortgage discount equal to 1/3 of the Central Bank's key rate.
- Free SberPrime+ subscription, discounts on partner company products.
- Reward for recommending friends to join Sber.