Position: Penetration Tester
Company: Raiffeisen Bank Aval
Experience required: 2y
Category: Security
English level: pre
Published: 2020-07-01T00:00:00+03:00

What to do:
• vulnerabilities discovery in manual and automated ways as part of penetration testing and application security reviews;
• manual test of binaries for vulnerabilities;
• evaluation of security risks and recommendation of threat mitigations;
• documentation of findings, reports presentation;
• development of the methodology and procedures for monitoring the safety of information security system;
• cheklist, script, etc. for the test.

Your profile:
• ability to manually find and exploit vulnerabilities in web and on-premise applications;
• experience with various penetration testing tools on Linux, Windows Mac, Android, IOS (Jeb, IDA Pro, Wireshark, Packetyzer, CommView, Burp Suite, Drozzer, PyCharm, Process hacker, etc.);
• deep knowledge of one or more operating systems (Linux, Windows, Mac, IOS, Android, ect);
• knowledge of different attack techniques (OWASP top 10; WASC; SQL injection; XSS; CSRF; SSRF; XXE; http response splitting; cache poisoning; code injection; MITM http/https, etc...);
• experience with HTML, XML, JavaScript, CSS, SQL, and JSON;
• experience to assess security with databases: SQL, Mysql, Mssql, LDAP;
• knowledge and understanding of Application Security, System and Network Security, Authentication and Security protocols.

Would be a plus your knowledge:
• WEB servers (IBM Websphere, JBoss, Apache, IIS);
• operating environments (IBM DataStage, Oracle Data Integrator, Web Sphere MQ, Web Sphere Message Broker);
• network technologies (OSI, TCP / IP, LAN, WAN, VLAN, SSL);
• programming languages Python, Powershell, Java, JavaScript;
• vulnerability scanners (Qualys, Tenable, Netsparker).

What we offer:
• join a large international company that provides possibilities for professional and personal growth;
• involve into challenging, large-scale projects which have an impact for our customers;
• knowledge sharing in our Group wide IT community including 14 Raiffeisen Banks;
• flexible working schedule, 28 days of paid vacation, official employment, attractive social package, distant work possibilities;
• competitive salary.
 
Become a part of our success story!