Penetration Tester

GHUB is assigned to a search project for a Penetration Tester role.

Our client specializes in integrated cybersecurity solutions and services for the automotive sector. Client supports companies to address all aspects of cybersecurity risk, from identifying threats and vulnerabilities to defining, designing, and implementing the relevant technological and organizational countermeasures.

In the context of sustainable growth we are looking for a Penetration Tester who will be based in Budapest HQ.

NB

Relocation to HQ is financially supported by Client.

Hybrid work schedule is possible.

Purpose of the role:

You will actively participate in various types of offensive security projects conducted by Client’s Security Assessment team. Your contribution to the Security Assessment service will be tracking and applying modern information security techniques, providing detailed description of your findings, and improving the expertise of penetration testing team by security research and automatization of daily routines. A person who deeply understands how typical attacks work, what exactly penetration testing utilities and exploits do (at the source code level), and who is also interested in constant learning and self-development is an ideal candidate for us.

Responsibilities:

• Participate in penetration testing and red teaming projects, including wireless network security assessment and social engineering.
  
• Participate in application vulnerability assessment, including cloud-based and mobile applications security analysis as well as source code analysis.
  
• Conduct security research.
  
• Automate routines for security assessment projects, customize existing utilities for defense evasion.
  
• Improve the internal knowledge base.
  
• Assist in writing reports and presenting the results of security assessments.
  
• Mentor junior colleagues and educate customer's security teams.
  

Requirements

• Degree in Information Technology, Information Security, Computer Science, or proven cybersecurity knowledge.
  
• Minimum 3 years of experience in the field related to Information Security.
  
• Good knowledge of typical systems and technologies used in a corporate infrastructure from a security perspective.
  
• Deep knowledge of modern networks and the most popular protocols used in corporate networks.
  
• Advanced knowledge of operating systems and their security concepts.
  
• Experience in identifying and exploiting vulnerabilities in web applications.
  
• Knowledge and experience in applying security standards, methodologies, and frameworks (PTES, NIST SP 800-115, OWASP, MITRE ATT&CK, CVSS, etc.)
  
• Good knowledge of PowerShell, Bash and Python scripting languages and experience using it for automation of work processes.
  
• Written and spoken English.
  
• Strong work ethic and responsible approach to security processes.
  
• Willingness to develop your competencies and knowledge of offensive security services.
  
• Experience in source code review/development in Python, C/C++, C#, Java, ASP.NET, PHP, NodeJS.
  
• Development, security, and operations or system administration experience.
  
• Industry-recognized certifications, for example from Offensive Security.
  
• Talks at professional conferences, published security research and whitepapers, registered CVEs.