Pentester / Information Security Specialist

Pentester needed for remote work with LeadsUp Solutions, a company developing B2B and B2C products for US and Europe markets. Salary from $2000.

LeadsUp Solutions is an international team developing B2B and B2C products for the US and Europe markets, with over 5 years of experience. We're looking for a Pentester to identify vulnerabilities and improve overall security. Responsibilities: - Comprehensive security testing of web apps, APIs, and mobile apps - Manual and automated vulnerability scanning - Web Application and API pentesting - Analyzing infrastructure, network services, and configurations for threats - Identifying and exploiting vulnerabilities in approved testing scope - Testing authentication, authorization, session management, and data handling - Validating findings, excluding false positives - Preparing detailed reports with risk assessments and recommendations - Collaborating with developers on security improvements

Expectations: - 2-3 years of practical Pentesting/Application Security experience - Strong understanding of OWASP Top 10 and security testing methodologies - Experience with Web Applications and REST API testing - Understanding of HTTP/HTTPS, TCP/IP, DNS - Knowledge of common vulnerabilities: XSS, SQL Injection, SSRF, IDOR, CSRF, RCE, Authentication Bypass, etc. - Proficiency with Burp Suite, Nmap, Nuclei, SQLmap and similar tools - Linux skills and understanding of network security basics - Ability to organize testing processes independently - Clear documentation of technical findings Nice to have: - Mobile Application Pentesting for iOS - Cloud infrastructure testing (AWS, GCP, Azure) - Python, Bash, or other languages for automation - CI/CD and DevSecOps experience - Certifications like OSCP, eJPT, PNPT - Bug Bounty and CTF participation

Offer: - Remote work format - Work with international B2B and B2C products - Minimal bureaucracy, autonomous workflow - Professional development and interesting technical tasks - Salary from $2000