Lead Engineer – Information Security Center (Penetration Tester)

About the role

An information security center is looking for a lead engineer (penetration tester) to plan and carry out regular penetration tests on network infrastructure, servers and web and mobile applications. The role also involves reporting findings, coordinating remediation with the IT team and taking part in red/blue team exercises.

Key responsibilities

• Plan and run regular penetration tests on networks, servers and web/mobile apps
• Use vulnerability scanners to find weaknesses in networks, servers and software
• Find security flaws in Android, iOS and web app source code using SAST/DAST methods
• Write clear reports on vulnerabilities for the technical and executive teams
• Coordinate fixing of issues with the IT team and provide technical support
• Research new attack vectors, zero-day vulnerabilities and current cyber threats
• Help prepare corporate security policies and procedures
• Take part in red team/blue team exercises

Required profile

• Bachelor's degree in IT, cybersecurity, computer science or engineering
• At least 2 years of experience in penetration testing
• Fluent Azerbaijani; English and Russian are an advantage
• Experience in the banking sector is an advantage
• Attention to detail, responsibility, teamwork and effective communication

Required skills

• Proficiency with Metasploit, Burp Suite, Nmap, Nessus/OpenVAS, Wireshark and OWASP ZAP
• Practical use of OWASP Top 10, PTES, OSSTMM and MITRE ATT&CK
• Static and dynamic analysis of Android and iOS apps (Jadx, APKTool, Frida, Objection)
• Scripting in Bash, Python or PowerShell; Linux/Unix
• Deep knowledge of TCP/IP, DNS, HTTP/S, SSL/TLS and Active Directory
• CERTIFIED ETHICAL HACKER, OSCP, eCPPTv3, CPTS, CWES, CompTIA PenTest+ or equivalent certificates are an advantage