Position: Senior Penetration Tester
Company: Under Defense
Category: Security
Experience required: 3y
English level: upper

UnderDefense is a fast-growing company that safeguards businesses around the globe from cybersecurity threats. We are a globally top-ranked firm by Gartner and Clutch, providing cyber resiliency consulting and technology-enabled services to anticipate, manage and defend against cyber threats. 
We work with 122 clients in more than 20 countries. We have already detected 38K vulnerabilities before hackers tried to exploit them.  We are passionate about making the Internet a Safer for people and businesses.
 We are looking for a motivated, career and customer-oriented Senior Penetration Tester to join our technical team. If you are passionate about Security as we do, come to join our team!

As Senior Penetration Tester at Under Defense, you will work in a highly skilled team to perform various and challenging Penetration Testing for our clients. Using your offensive skills,you will help organizations to gain insight into their vulnerabilities and risks. You will be able quickly to assimilate new information and face new client environments on a weekly or monthly basis.  You will be expected to understand all the threat vectors to each environment and properly assess them. Are you up to the challenge?


**Responsibilities:**
- Perform network penetration, web and mobile application testing, threat analysis and social-engineering assessments
- Create detailed penetration testing reports which explain identified technical and logical security findings, describe potential business risks, and present prioritized recommendations
- Effectively communicate findings and strategy to client stakeholders.
- Understand, review, and interpret vulnerability assessment to help design Secure SDLC in a mixed waterfall/agile environment (OWASP SAMM)
- Hands-on perform specialist app sec processes in SDLC (design review, Java code review, testing, etc)
- Help properly set up automation in CI/CD (so HP Fortify / HP WebInspect suck less)
- Basic performance testing to ensure the system’s Availability (optional)
- Contribute to the ongoing enhancement of the company’s penetration testing assessment capabilities
- Collaborate and share knowledge internally
- Ability to think outside the box and simulate adversarial approaches

**Requirements:**
- 3+ years experience in at least three of the following:
   Network penetration testing and manipulation of network infrastructure
   Mobile and/or web application assessments
    Email, phone, or physical social-engineering assessments
- Shell scripting or automation of simple tasks using Perl, Python or .NET, or similar languages
- Basic experience in  Reverse Engineering is a plus.
- Strong knowledge of tools used for a wireless, web application, and network security testing
- Mastery of Unix/Linux/Mac/Windows operating systems.

Additional Qualifications:
eWPT or OSCP or other related security certifications
Ability to document and explain technical details in a concise, understandable manner

**What we offer:**
- Growth, really fast growth
- Good salary + really challenging projects
- Brilliant Team
- Flexible working hours
- Paid vacation and sick-leaves
- Paid certifications and courses
- Internal training and workshop (conferences, workshops, training, etc.)
- English courses  
- Work-rest balance support ( foosball, workout station)