Position: Security Engineer
Company: IT-REX
Experience required: 3y
English level: upper

Требования:
A technical or university level qualification, preferably in Computer Science.
Equivalent combination of education and experience may be substituted.
Excellent written and oral communication skills (especially in the English
language)
Experience in tools like Burpsuite, IDA, GDB, ApkTool, etc.
A strong knowledge of:
○ Application security (mobile, client, web)
○ Triage, vulnerability assessment, and responsible disclosure/reporting
○ Penetration testing lifecycle (reconnaissance, penetration, reporting)
○ Reverse engineering & decompilation
○ Serialization mechanics used within network protocols
○ Binary, hexadecimal, and ASCII notations
A working knowledge in:
○ Cryptographic algorithms (encryption, hashing)
○ API architectures and mechanisms
○ Back-end architectures and common vendor libraries
○ Obfuscation techniques
○ Anti-cheat wrappers (BattlEye, EAC, etc.)
○ Python development
○ Linux, Unix, Windows systems
A basic knowledge of:
○ TCP/UDP network protocol
○ C++/C/C#
Experience in malware analysis, forensics, Unreal Engine and Unity
development a plus

Обязанности:
● Reverse engineering of binaries for network proxying purposes
● Bootstrap proxy setup to support interception of custom network protocols and
packet crafting
● Penetration testing for a broad range of applications (mobile, client, web,
console)
● In-depth reporting of discovered vulnerabilities (PoC, resolution, technical and
non-technical description of vulnerability)
● Risk assessment of discovered vulnerabilities (impact, probability)
● Collaborating with other team members during penetration testing (interaction
is key during pair hacking)
● Actively seeking and working on feedback from clients and partners
● Performing security operations, communicating and assisting from a remote
location