Position: Penetration tester
Company: Mobilunity
Experience required: 1y
Category: QA Automation
English level: intermediate
Published: 2020-08-01T00:00:00+03:00

MOBILUNITY IS A PROVIDER OF DEDICATED DEVELOPMENT TEAMS THAT BELIEVES IN EMPOWERING UKRAINIAN TALENT, BY CONNECTING LOCAL IT PROFESSIONALS, WITH GLOBAL, FORWARD THINKING ORGANIZATIONS. OUR TEAMS OF ENGINEERS ARE FULLY DEVOTED TO THE DEVELOPMENT OF OUR CLIENT’S PRODUCTS, AND WE AS A COMPANY ARE ALSO FULLY DEDICATED TO OUR TEAMS AND THEIR DEVELOPMENT. IN ORDER TO MAKE THIS COLLABORATION HAPPEN, WE FOLLOW WHAT WE CALL THE 3 R’S OF NEARSHORING: RELATIONSHIPS, RECRUITMENT, & RETENTION.
 


ABOUT THE PROJECT:

 A Belgium HR service provider with a few sub-brands. Main focus -- developing a thriving business, where employer and employee work as one to be successful.  They match every person’s skills with the current needs in the labor market, all the while anticipating the needs yet to arise. Meaning that they connect each man or woman with a successful company in need of his or her talent.

**Requirements **

Main purpose: 
to validate if the application is secure towards the outside world (authentication), we trust authenticated users and there’s no need to test authorization. As there’s a huge amount of personal data a leak is our main concern.

Expected outcome: 
a recommendation report on which attacks have been executed, which ones were successful, and what could be improved.

More technical:
Internal resources are hidden behind VPN, is there a way to access them by external users?
Is our media storage secure?
Do we need 2F authentication in AWS accounts?

COME ON BOARD, AND LET’S GROW TOGETHER!