Penetration tester

компания "dataart" клиент dataart’s client is one of world’s leaders in the management consulting market. the client runs internal penetration testing program aimed at over a thousand of their internal and client-facing applications. особенности проекта dataart is one of the vendors who delivers these penetration tests. особенности позиции we are looking for a penetration tester who will assess web applications, network infrastructure and cloud environments to detect and report about potential vulnerabilities. обязанности conduct network and application-level security assessments; use automated tools and manual techniques to identify and verify common security vulnerabilities create comprehensive assessment reports that clearly identify root cause and remediation strategies communicate with client personnel to gather information, clarify scope and investigate security controls provide support to the companychr(39)s security competence through information researches, tool creation, process improvement and other activities требования 3+ years of experience in it 2+ years of experience in information security (as a penetration tester, security analyst, etc.) solid understanding of the existing types of web application vulnerabilities and security threats ability to deliver projects using well-defined methodology for network and application-level vulnerability assessments and penetration tests experience with specialized tools for manual and automated penetration testing (burpsuite, sqlmap, nmap, metasploit, nessus/openvas, wireshark, etc.) experience in developing your own auxiliary programs in any programming language familiarity with various technologies and architectures (linux, windows, active directory, java, .net, etc.) ability to work well with customers, self-manage though difficult situations, be focused on client satisfaction good spoken and written english будет плюсом knowledge of cryptography knowledge of the basics of databases and skills in working with a dbms (one of: mssql, oracle, mysql, postgresql, etc.) experience in reverse engineering and source code analysis familiarity with security standards (pci dss, iso27000, gdpr, etc.) experience in writing specialized articles and participating in conferences