Banking Systems Security Analyst

Positive Technologies is looking for a specialist to analyze the security of banking web applications, find vulnerabilities, participate in Positive Hack Days and conduct research. Remote work possible. Salary discussed at interview.

Analyze the security of banking web applications, striving to find all vulnerabilities, from simple issues such as insecure file storage or open redirect to the most dangerous and complex ones: various injections, file reads, local or remote code execution, and business logic vulnerabilities. Participate in organizing the largest cybersecurity forum Positive Hack Days, conduct research, and publish it in the PT SWARM team blog.

Know what web vulnerabilities exist and how to exploit them. Have theoretical and practical experience in finding and exploiting various web vulnerabilities, know their features and different exploitation vectors, and be able to find business logic vulnerabilities. Understand how vulnerabilities work and be able to provide recommendations for their remediation. Be able to find vulnerabilities using white-box methods, read code in one of: C#, Java, Node.js.

Remote work possible. Salary discussed at interview.