Other

Cyber Security Engineer / Pentester

Responsibilities

conducting penetration tests: performing complex pentests (Black/Grey/White Box) for web applications, APIs, network and cloud infrastructure
analysis and elimination of vulnerabilities: detection of system security gaps, analysis of application business logic, validation of SAST/DAST scanners results and screening of false positives (False Positives)
Monitoring and Response: Operational Response to Cybersecurity Incidents, Attack Analysis and Threat Modeling

higher or secondary specialized in cybersecurity, computer science or related fields (or relevant practical experience)
experience with Linux/Windows OS, deep understanding of network protocols and security models, understanding of web application security principles, API and containerized environment (Docker, Kubernetes)
expert knowledge of analysis and pentesting tools (Burp Suite, OWASP ZAP, Nmap, Metasploit, SQLmap, etc.)
skills in code reading and writing scripts for automation (Python, Bash or Go)
knowledge of basic methodologies and standards (OWASP Top 10, WSTG, ASVS, NIST)
analytical thinking, attention to detail, the ability to think like an intruder (adversarial mindset), constructiveness in communication
absence of convictions and open criminal proceedings
practical experience with cloud platforms (AWS, GCP, Azure)
availability of specialized international certifications (OSCP, OSWE, CEH, eWPT, CompTIA Security+, etc.

mobilization until the end of martial law or contract service
the possibility of transferring active military personnel with the consent of the commander of the unit
the possibility of service for candidates who, according to the conclusion of the VLC, are suitable for service in military support units, TCC and SP, higher educational institutions, training centers, etc.
the possibility of renewal of candidates with the status of MFR
cash security: from UAH 50,000 depending on the task
service in the city of Kiev