Penetration tester

компания "dataart" position overview dataart is a global software engineering firm. with over 25 years of experience, teams of highly-trained engineers around the world, deep industry sector knowledge, and ongoing technology research, we help clients create custom software that improves their operations and opens new markets. responsibilities analyzing security threats (applications and network infrastructure in general) to detect and eliminate potential vulnerabilities penetration testing using white/black box methodologies (including analysis of the application’s source code) informing clients about discovered vulnerabilities by creating detailed reports (including a description of possible risks and recommendations on fixing vulnerabilities) supporting the process of fixing vulnerabilities and participating in the development of control mechanisms for creating secure code continuous communication with the client to clarify the necessary details and tasks actively participating in all areas of the companychr(39)s security department (researching new vulnerabilities, developing auxiliary programs, participating in conferences, etc.) requirements 2+ years of experience in it at least a year of experience in information security (penetration tester, security analyst, etc.) solid understanding of the existing types of vulnerabilities and security threats familiarity with any existing penetration testing methodology (owasp, wasc, osstmm, etc.) experience with specialized tools for manual and automated penetration testing (burpsuite, zap, sqlmap, nmap, metasploit, nessus/openvas, wireshark, etc.) experience in developing your own auxiliary programs in any programming language familiarity with various technologies and architectures (linux, windows, cisco, active directory, java, .net, etc.) high level of motivation to work and develop professionally in software security good spoken english nice to have knowledge of cryptography knowledge of the basics of databases and skills in working with a dbms (one of: mssql, oracle, mysql, postgresql, etc.) experience in reverse engineering and source code analysis familiarity with security standards (pci dss, iso27000, owasp top 10, etc.) experience in writing specialized articles and participating in conferences