Senior Security Engineer

Responsibilities

• Sequence vulnerabilities together to achieve advanced exploitation outcomes, such as pairing low-severity information disclosure with SSRF to achieve Remote Code Execution
• Write custom exploits and automate complex multi-stage authentication scripts
• Configure and scale continuous, automated security validation tools and frameworks
• Apply deep knowledge of the OSI model and core network protocols to identify and address infrastructure vulnerabilities
• Assess and remediate web application vulnerabilities, including OWASP Top 10 issues and API flaws like IDOR
• Engineer automated exploit scripts that safely validate vulnerabilities without crashing live network infrastructure or corrupting production databases
• Conduct threat modeling exercises to anticipate and mitigate potential attack vectors
• Manage vulnerability identification, prioritization, and remediation processes across systems
• Leverage cyber threat intelligence to inform security validation strategies and exploit development

Languages

Required

• 5+ years of experience in security engineering, penetration testing, or related roles
• Proficiency in Python for scripting custom exploits and automation
• Knowledge of cyber threat intelligence, threat modeling, and vulnerability management practices
• Familiarity with OWASP Top 10 vulnerabilities and API security flaws such as IDOR
• Understanding of the OSI model and core network protocols, including DNS, BGP, and TCP/IP

Nice to have

• Proficiency in English at a B2+ level
• Skills in Bash and Go Language for scripting and automation

Other open roles here

• Senior/Lead Power BI Software EngineerRemote · Ukraine
• Delivery Manager (AI Native)Remote · Ukraine
• Senior Financial Manager (m/f/d)Remote · Germany
• Principal, Business ConsultingRemote · United States
• Senior Delivery Manager - .NET/JavaIndia · On-site · relocation