Security Engineer

We're looking for penetration tester/vulnerability researcher who passionate about web/cloud security. Our dream is a hacker who goes deeply in the sources of web browsers, HTTP/HTML standards, Kubernetes internals.

Your primary tasks will be:

- vulnerability assessments of web applications

- vulnerability assessments of GCP/GKE infrastructures

- secure code reviews

- penetration testing

- modification and tuning of fuzzing tools

- development of custom rules and modification of code analysis tools

- modification and tuning of cloud infrastructure audit tools

- developing PoC and provide other extended proofs of vulnerability severity level

- providing guidance and training to software development and operational teams

- developing secure coding standards and rules for IDE/CI tools which support that standards

- developing challenges/skills tests for software development teams

We expect from you:

* experience in shell scripting and python programming

* experience with web-application security testing(far behind the OWASP TOP 10)

* experience with security of OpenID/Oauth2/SAML protocols

* experience with parsing code, including AST representations and grammar parsing

* knowledge of common web application architectures

For sure you need:

* Read PHP/JavaScript code

* have an in-depth knowledge of HTTP protocol

* being familiar with Docker, Kubernetes, GCP tools

* know well acronyms and their appropriate use (CVE, CVSS, CWE :)

* being a fun of PortSwigger blog

* being a CTF player

* have known pentest certifications (OSCP/CEH/BSCP/HTB CPST or similar)

In addition we expect from you:

* being a strong team player

* effectively communicate findings and remediation approaches

* have ability to take ownership of features you ship

* have interest in the feature/product vision

* being self-learner, strong can-do attitude and great interpersonal skills.

* being comfortable with writing documentation (a lot of documentation)

A big plus is:

- Google Cloud certification

- Kubernetes certification

- Terraform certification

- BigQuery SQL perfect knowledge

- SSO, Oauth2, OIDC, SAML experience

Why work at Pakurity?

* We’re a well-funded company from 2014 with several key customers

* We have a pragmatic, ready to change and adopt culture

* We are focused to provide high quality services to our customers and being proactive in their needs

* We have credit of trust from our customers and freedom to choose solutions to address their needs

When you join Pakurity, you can expect:

* Competitive compensation

* Flexible hours and additional study days

* Career growth

In any case if you're passionate about high load/security projects you will be able to grow quickly in terms of financial gain and professional development.

Pakurity is a team of cyber-security professionals. We are based in Ukraine but provide services all over the world. Our core services:

- penetration testing

- incident response

- IT audit

- secure software development trainings