Position: Security QA Engineer / White Hat Hacker
Company: Aitheon
Category: QA Automation
Experience required: 3y
English level: upper
Published: 2020-05-01T00:00:00+03:00

Requirements:
Reporting directly to the Chief Product Officer, our first Security Engineer (Sec) is responsible for implementing web application security testing tools in QA & code releases. The Sec Engineer owns all penetration testing, DAST, SAST, tracks identified vulnerabilities & provides resolutions. Working across Product, Hardware, QA, etc. the Aitheon Security Engineer reviews product requirements and performs risk assessments on planned application changes. This role requires a highly collaborative approach paired with excellent communication skills to balance trade-offs, push back and even negotiation to get things done. In addition to the day to day security testing, the Security Engineer plays a critical role in incident response and participates in an on-call rotation. This is where you come in...

Over the past 2+ years of industry experience, you have developed a broad range of security-related skills, gained exposure to diverse application security frameworks, tools and methodologies while working in startups to midsize B2B SaaS companies.

Experience in developing applications using Angular 7 or higher, or NodeJS and MongoDB, or С++ or Python programming & exposure to Burp Suite or similar automated web application security testing tools is vital as these are the core components in our tech stack. You keep up to date with web application security concepts (OWASP top 10 for example), AWS best practices, have a working knowledge of securing containerized, serverless environments such as EKS, Kubernetes, Docker.


Would be a plus:
It’s a major plus if you have spent time participating in bug bounty, ethical hacking, or contributing to other security-related research activities.

You are highly collaborative to bridge the gaps between Engineering, Product, Security and the rest of the business to create a secure and stable network. You can balance between builder & breaker. Curiosity, patience, proactiveness & a learner’s mindset are at the core of your approach to reducing the threat landscape.


We offer:
— Salary range depending on performance (we are covering all tax expenses)
— Develop innovative, future-driven products in AI and Robotics and opportunity to develop hardware
— Paid sick leaves and vacation (24 days on a year)
— Personal development and professional growth (paid 50% cost of classes, workshops, certification)
— Sports activities inhouse
— Paid lunches
— Cozy office with good infrastructure
— Work in a friendly, truly inclusive team with a family-like feel
— Minimal hierarchy and direct communication with the management team


Responsibilities:
Reporting directly to the Chief Product Officer, our first Security Engineer (Sec) is responsible for implementing web application security testing tools in QA & code releases. The Sec Engineer owns all penetration testing, DAST, SAST, tracks identified vulnerabilities & provides resolutions. Working across Product, Hardware, QA, etc. the Aitheon Security Engineer reviews product requirements and performs risk assessments on planned application changes. This role requires a highly collaborative approach paired with excellent communication skills to balance trade-offs, push back and even negotiation to get things done. In addition to the day to day security testing, the Security Engineer plays a critical role in incident response and participates in an on-call rotation. This is where you come in...

— Vulnerabilities discovery in Manual and Automated ways as part of Penetration Testing and Application Security reviews
— Evaluation of security risks and recommendation of threat mitigations
— Documentation of findings and Security reports presentation