Cyber Security Engineer (Vulnerability research and Pentesting for WEB/GCP),

We're looking for penetration tester/vulnerability researcher who passionate about web/cloud security. Our dream is a hacker who goes deeply in the sources of web browsers, HTTP/HTML standards, Kubernetes internals. Your primary tasks will be: - vulnerability assessments of web applications - vulnerability assessments of GCP/GKE infrastructures - secure code reviews - penetration testing - modification and tuning of fuzzing tools - development of custom rules and modification of code analysis tools - modification and tuning of cloud infrastructure audit tools - developing PoC and provide other extended proofs of vulnerability severity level - providing guidance and training to software development and operational teams - developing secure coding standards and rules for IDE/CI tools which support that standards - developing challenges/skills tests for software development teams We expect from you: * experience in shell scripting and python programming * experience with web-application security testing(far behind the OWASP TOP 10) * experience with security of OpenID/Oauth2/SAML protocols * experience with parsing code, including AST representations and grammar parsing * knowledge of common web application architectures For sure you need: * Read PHP/JavaScript code * have an in-depth knowledge of HTTP protocol * being familiar with Docker, Kubernetes, GCP tools * know well acronyms and their appropriate use (CVE, CVSS, CWE :) * being a fun of PortSwigger blog * being a CTF player * have known pentest certifications (OSCP/CEH/BSCP/HTB CPST or similar) In addition we expect from you: * being a strong team player * effectively communicate findings and remediation approaches * have ability to take ownership of features you ship * have interest in the feature/product vision * being self-learner, strong can-do attitude and great interpersonal skills. * being comfortable with writing documentation (a lot of documentation) A big plus is: - Google Cloud certification - Kubernetes certification - Terraform certification - BigQuery SQL perfect knowledge - SSO, Oauth2, OIDC, SAML experience Why work at Pakurity? * We’re a well-funded company from 2014 with several key customers * We have a pragmatic, ready to change and adopt culture * We are focused to provide high quality services to our customers and being proactive in their needs * We have credit of trust from our customers and freedom to choose solutions to address their needs When you join Pakurity, you can expect: * Competitive compensation * Flexible hours and additional study days * Career growth In any case if you're passionate about high load/security projects you will be able to grow quickly in terms of financial gain and professional development. Pakurity is a team of cyber-security professionals. We are based in Ukraine but provide services all over the world. Our core services: - penetration testing - incident response - IT audit - secure software development trainings