Senior Penetration Tester

Vaga não está no LinkedIn

🕒 Julho 29

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

IGAMINGHUNT

SiteLinkedInTodas as Vagas

11 - 50 funcionários

Fundada em 2022

🎯 Recrutamento

🎲 Jogos de Azar

🤝 B2B

Recruitment • Gambling • B2B

A IGAMINGHUNT é uma empresa de recrutamento especializada em encontrar talentos para a indústria de iGaming. Eles recrutam para cargos de alta gerência, engenheiros & desenvolvedores, produtos & marketing, e funções administrativas & de RH, além de fornecer insights de mercado, liderança de pensamento (blogs, podcasts) e orientações consultivas para operadores de iGaming e startups. A empresa enfatiza o profundo conhecimento do setor, educa sua equipe sobre as dinâmicas do mercado e auxilia os clientes com estratégia de contratação e soluções de talentos adaptadas aos mercados de iGaming regulados e dinâmicos.

Descrição

• Plan and execute penetration testing activities across web applications, APIs, mobile applications, internal and external infrastructure, and AWS cloud environments • Perform offensive security exercises, including red team and assumed-breach scenarios covering privilege escalation, lateral movement, persistence, and data exfiltration • Assess the security of cloud-native services, Kubernetes environments, microservices, and CI/CD pipelines • Identify vulnerabilities affecting payment systems, wallets, KYC/AML processes, bonus mechanisms, affiliate tracking, and other business-critical workflows • Work with Product, Engineering, AppSec, Payments, and Fraud teams to prioritize findings and support remediation efforts • Develop custom scripts and internal tools to improve testing capabilities where standard solutions are insufficient • Contribute to threat modeling activities and support secure-by-design initiatives • Review penetration testing plans, reports, and provide technical guidance to junior and middle security specialists • Research emerging vulnerabilities, MITRE ATT&CK techniques, security advisories, and translate them into actionable improvements • Support security assessments for new products, releases, and market launches, including effort estimation and pre-certification activities • Act as a security advisor for technical and business stakeholders on offensive security matters

🎯 Requisitos

• 4+ years of hands-on experience in penetration testing or offensive security • Proven practical experience in at least three of the following areas: • Web applications / APIs • Internal networks • External infrastructure • Cloud environments (AWS/GCP) • Mobile applications (iOS/Android) • OSCP or an equivalent offensive security certification • Strong knowledge of SAST, SCA, DAST, AWS/GCP, MITRE ATT&CK, OWASP ASVS, OWASP WSTG, and PTES • Good understanding of application architecture, including MVC and data flow principles • Knowledge of supply chain attack techniques • Experience writing scripts in Python and Bash • Understanding of IAM models within at least one major cloud provider • Hands-on experience testing Kubernetes-based environments, cloud-native applications, CI/CD pipelines (GitLab, GitHub Actions, Jenkins) and Infrastructure as Code solutions (Terraform, Helm, CloudFormation) • Strong reporting, documentation, and communication skills • Ability to balance security priorities with business and release deadlines • Solid understanding of security frameworks and compliance standards, including PCI DSS, ISO 27001, NIST, and GDPR • At least Upper-Intermediate level of English

🏖️ Benefícios

• Generous annual leave plus paid sick leave • Comprehensive benefits package including private medical and dental insurance, sports allowance, and food vouchers • Professional development support with an education budget and learning opportunities • Modern office with complimentary meals, snacks, and employee wellness initiatives • Recognition programs, regular team events, and gifts for personal milestones