Penetration Testing Specialist

X5 Tech seeks a Penetration Testing Specialist to conduct penetration tests, automate security, and harden Kubernetes. Remote. Salary discussed at interview. 3+ years of experience.

Conduct automated and manual penetration testing of internal and external services (internal infrastructure vulnerabilities, Web, API, network segments). Automate security and security tooling: develop and maintain automation scripts (Python, Go, Bash) for orchestrating security scanners and processing results. DevSecOps tasks and Kubernetes security: audit and harden Kubernetes clusters (RBAC, Network Policies, Pod Security Standards/OPA Gatekeeper, restricting privileged containers). Vulnerability Management as an internal service. Interact with SOC/Blue Team to share indicators of compromise (IoC) and clarify incident details identified during pentests.

Experience with and knowledge of tools from Kali Linux/Parrot Security, Burp Suite, Metasploit, Nmap. Confident command of Python/Bash for automation. Understanding of K8s architecture (etcd, kube-apiserver, CNI). Knowledge of network protocols and modern web vulnerabilities (OWASP Top 10, API Top 10). Ability to balance between 'breaking' and 'building' — not only find vulnerabilities but help fix them. Client-oriented approach when working with internal customers. Independence in solving medium-complexity tasks with escalation of complex cases to Senior/Lead.

Remote work. Salary discussed at interview.