Security Engineer (Ethical Hacker)

About the role

We are looking for a Security Engineer who will act as our internal ethical hacker. You will identify vulnerabilities across our digital products and help us build resilient, bullet‑proof technologies.

Key responsibilities

• Perform end‑to‑end penetration tests on web, mobile (iOS/Android) and network infrastructures.
• Run regular vulnerability assessments and security scans using automated tools and manual techniques.
• Review source code (SAST/DAST) for security flaws in early development stages.
• Develop exploit proofs‑of‑concept to demonstrate impact of discovered issues.
• Validate detection capabilities by simulating attacks and tuning alerts.
• Collaborate with developers to provide remediation guidance and verify fixes.
• Integrate security testing into CI/CD pipelines (DevSecOps).
• Stay current on emerging threats, zero‑day vulnerabilities and bypass techniques.

Required profile

• Bachelor’s degree in Computer Engineering, Cyber Security or a related field.
• Hands‑on experience in penetration testing and vulnerability management.
• Strong analytical thinking and a hacker mindset.
• Good command of English to follow global security trends.
• Relevant certifications such as OSCP, eJPT or GPEN are a plus.

Required skills

• Offensive security tools: Burp Suite Professional, Metasploit, Nmap, Nessus, SQLmap, Kali Linux.
• Deep knowledge of OWASP Top 10 and SANS Top 25 vulnerabilities.
• Network security technologies: firewalls, IDS/IPS, WAF, VPNs.
• Scripting: Python, Bash, PowerShell.
• Cloud security (Azure, AWS) and container security (Docker, Kubernetes) from an offensive perspective.
• Source‑code review languages: C#, JavaScript.