Position: Penetration Tester
Company: UnionFlame
Category: Security
Experience required: 2y
English level: upper

**Responsibilities:**
Vulnerabilities discovery in Manual and Automated ways as part of Penetration testing and Application Security reviews;
Manual test of binaries for vulnerabilities;
Evaluation of security risks and recommendation of threat mitigations;
Documentation of findings; Record PoC videos; Reports presentation;
Security training for internal QA and Development teams.

**Requirements:**
- Ability to manually find and exploit vulnerabilities in web and on-premise applications;
- Experience with various penetration testing tools on Linux, Windows Mac, Android, IOS (Jeb, IDA Pro, Wireshark, Burp Suit, Drozzer, PyCharm, Process hacker, etc.);
- Experience at BlackBox and/or WhiteBox application assessment;
- Deep knowledge of one or more operating systems (Linux, Windows, Mac, IOS, Android, ect.);
- Knowledge of different attack techniques (OWASP top 10; WASC; SQL injection; XSS; CSRF; SSRF; XXE; http response splitting; cache poisoning; code injection; MITM http/https, etc.);
- Experience with HTML, XML, JavaScript, CSS, SQL, and JSON;
- Experience to assess security with databases: SQL, nosql, LDAP;
- Knowledge and understanding of Application Security, System and Network Security, Authentication and Security protocols.