Job description:
- Conducting pen-tests and identifying possible control gaps of the current infrastructure, architecture and applications
- Cooperation with Security Architects, Security Managers, Developers and Infrastructure owners to validate solutions deployed by teams and clearly define possible mitigation actions
- Documentation of the findings and providing a thorough post-event analysis
Requirements:
- Minimum 2 years of experience in penetration testing role
- Working knowledge of common security tools - Burp Suite, Kali Linux or similar
- Experience in Threat Risk Modelling Concepts like STRIDE or DREAD, OWASP Top Ten for web application
- Knowledge of tiered application architectures, web applications, APIs, mobile applications, desktop applications, and the underlying technology of cloud infrastructure
- Security Certification in one of the following: OSCP, CEH, CSX, CISSP-ISSAP, AWS Certified Security, CompTIA Security+, Ethical Hacking, CISSP
- Fluent in English
We offer:
- Attractive salary
- Work in a dynamically developing company, which is a global leader in the transport and logistic sector
- Various challenges at work
- Great atmosphere
- Subsidies to private health care, sport cards and group insurance
Nice to have:
- Experience with cyber security incident response and post breach analysis
- Knowledge of OS and Network level forensics tools and techniques
