описание
The company specializes in AI-powered biometric solutions and remote identity verification. Its solutions are used across fintech, banking, telecommunications, and government sectors in more than 30 countries.
задачи
- Conduct manual security audits and penetration tests of web applications and APIs using OWASP Top 10 and API Top 10 as references
- Analyze and reverse-engineer client-side JavaScript, including obfuscation and deobfuscation, and assess browser-based media capture workflows such as getUserMedia and WebRTC
- Assess liveness detection systems against attacks and media substitution
- Write automation scripts in Python and JavaScript, analyze network traffic with Burp Suite, and develop vulnerability proofs of concept
- Prepare technical reports, calculate CVSS scores, and work with developers to remediate vulnerabilities
требования
- At least 5 years of experience in application security or web application penetration testing
- Higher education in Computer Science or Information Security, or relevant professional certifications such as OSCP, OSWE, BSCP, or eWPT
- Strong knowledge of OWASP Top 10, client-side code analysis, and traffic interception using Burp Suite
- Strong scripting skills in Python and JavaScript
- Fluent Russian
- Professional working proficiency in English
- Будет плюсом: Experience in biometric security and anti-spoofing, knowledge of RASP and client-side protection mechanisms, basic knowledge of Android and iOS security
условия
- Условий в вакансии нет
