Position: Senior Security Engineer
Company: SoftServe
Category: Security
Experience required: 5y
English level: upper

**WE ARE** 

Critical Services Center of Excellence (CoE) as the subdivision of SoftServe, is a team of highly professional folks, with the primary focus on technology covering software architecture, startups, and enterprise technologies. Our format of the job is the consultancy for different projects, not tied to specific projects, technologies, timelines. We are a team of 10 professionals and located in Lviv, Kyiv and Poland.

We do Security for everything. 

**YOU ARE**

- Having a strong concept of common penetration testing frameworks (PTES, OSSTMM, NIST)
- Showing an expert understanding of network protocols, design, and operations 
- Possessing practical experience with web application security issues (e. g. OWASP Top 10) 
- Able to read and understand source code (Java, .NET, PHP, C, C#, Python, Ruby, Javascript, etc.) 
- Hands-on with implementing application-level requirements from at least one compliance standard (PCI DSS, HIPAA, etc.) 
- Experienced in Android and IOS mobile application security testing 
- Familiar with different web technology stacks and frameworks from the security perspective (Java/JBoss/Apache Sling/.NET/RoR/IBM Web Sphere etc) 
- Knowledgeable about common security tools (Metasploit, Cobalt Strike, mimikatz, nmap, fuzzers, Burp Pro, Acunetix, Nessus Pro, Wireshark, Powershell Empire, etc) 
- Skilled in offensive TTPs (Tactics, Technics, and Procedures) including post-exploitation and lateral movement 
- Proficient in cryptography concepts and protocols
- Competent in adopting and crafting custom proof of concept exploits 
- Having background of adopting or crafting custom security tools
- An owner of Professional Cybersecurity Certifications: CEH, OSCP, OSCE, CREST, GIAC, CISSP, CISM, CISA, etc. 
- Showing excellence in public speaking 

**YOU WANT TO WORK WITH**

- Web application assessment  
- Mobile application assessment 
- Network and host layer vulnerability assessment 
- API assessment 
- Threat modeling and Risk assessment 
- Blackbox, greybox, whitebox manual penetration testing 
- Compliance checks and pre-audit activities 
- Security controls design according to compliance and business requirements 
- Application code review and reverse engineering 
- Establishing Secure SDLC on the project 
- Providing on-demand, custom security training for internal and external teams 
- Gathering technical and business requirements, maintaining communication with the customer and internal parties 
- Detailed reporting and proposal preparation 
- Testing results and remediation plan presentation 

**TOGETHER WE WILL**

- Work with Top SecOps Team in the company
- Participate in discovery phases and workshops covering all technical aspects of the deal
- Get certifications on Cloud technologies
- Be able to work with the latest modern tools and technologies on different projects
- Get access to strong educational and mentorship programs
- Work as a consultant with project enrollment from 2 to 6 months
- Get a competitive salary