Position: Web Penetration Tester
Company: Samsung R&D Institute Ukraine
Experience required: 2y
Category: Security
English level: intermediate
Published: 2021-05-01T00:00:00+03:00

Samsung is an amazing place to work with great people in an outstanding environment.
With us you will have an opportunity to be a part of innovation that makes a real difference in the lives of millions of people worldwide.
Samsung R&D Institute Ukraine (SRK) has been working in Kyiv since 2009.
We develop innovative solutions in Security, Artificial Intelligence, Augmented and Virtual Reality for the next generations of consumer electronics.
Currently we’re looking for **Web Penetration Tester**

**Job Description:**

Web vulnerability assessments and penetration testing of internal products:
•	Black-box security validation of WEB services and server infrastructure
•	Enterprise IT infra penetration testing
•	Security reviews according to Secure SDLC process (including requirements, design, source code)


**Major Requirements:**

•	BlackBox and WhiteBox WEB pen.testing and vulnerability assessment experience
•	OWASP Top-10: understanding of common Web Application vulnerabilities
•	Crypto: understanding of crypto primitives and protocols (SSL/TLS, authentication & authorization protocols, crypto algs.)
•	DB: uderstanding of database operation (PostgreSQL, MongoDB, MySQL, SqLite, MS SQL)
•	Ability to understand execution logic of JavaScript, Java, C++, .NET
•	Toolset: hands-on experience with IDA, GDB, Burp, JEB, scripting (Python), assessment automation tools (fuzz, scan)
•	Good technical English


**Optional Requirements:**

•	Security background (University, relevant prior employment, community activities, CTF)
•	Knowledge of PTES and NSA Vulnerability and Penetration Testing Standards
•	Network security: understanding of WAF, IPS/IDS operation and weaknesses 
•	Proficient in Scala, Go, Lua code auditing
•	Strong understanding of REST, SOAP operation


**We offer:**

•	Annual bonus
•	Official employment
•	Paid 28 days of annual vacations and sick leaves
•	Paid days off on Ukrainian official holidays
•	Paid maternity leaves
•	Opportunity to become an inventor of international patents with paid bonuses
•	Medical & life insurance for employees and their children
•	Convenient office location (Business Center 101 Tower)
•	Paid lunches
•	Discounts to Samsung products, gym, other services
•	English language courses
•	Regular education and self-development on internal courses and seminars, office library