Infrastructure Penetration Tester

RUTUBE seeks an Infrastructure Penetration Tester in Moscow with 1+ year of experience. Salary is negotiable.

Conduct regular infrastructure analysis to identify vulnerabilities in network components, operating systems, and application services using black box, grey box, and white box methods. Conduct comprehensive penetration testing and simulate real adversary actions (Red Teaming) to verify the effectiveness of security measures and SOC operations. Test wireless networks. Conduct social engineering testing, including phishing attacks and checking employee security awareness. Prepare recommendations for fixing identified vulnerabilities and improving overall security.

Understanding of network protocols: TCP/IP stack, HTTP/S, DNS, DHCP, SMB, RPC, RDP. Understanding of modern OS and corporate environment architecture: Windows and Linux/Unix systems, Active Directory. Understanding of authentication and authorization mechanisms: Kerberos, NTLM, LDAP, and permission models (DACL, ACE, GPO). Understanding of lateral movement techniques: methods, pivot hosts, and segment bypass. Knowledge of BASH, Python, or other scripting automation tools.