Загрузи резюме, чтобы видеть мэтчи с вакансиейЗагрузи резюме, чтобы видеть мэтч с вакой
подготовься к отклику
ai-инструменты
Чтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме
О рекламодателе
ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ "ЦЕНТР НАЦИОНАЛЬНЫХ ИНТЕЛЛЕКТУАЛЬНЫХ СИСТЕМ" ИНН: 9704271170
описание
“Rabitabank” OJSC announces recruitment for the position of Junior Penetration Tester in the Cybersecurity Division of the IT Security Department. As one of the country’s largest banks, “Rabitabank” OJSC offers you the opportunity to build a successful career and achieve personal development within a professional team. Rabitabank is looking for people who are eager to learn, positive, and creative in their approach to work.
задачи
Conduct penetration tests of networks, web applications, APIs, and mobile applications with the support of the team.
Participate in phishing simulations and red teaming tests.
Verify identified vulnerabilities and investigate their causes and possible impacts.
Prepare reports on test results and recommendations for remediating vulnerabilities.
Re-test vulnerabilities after fixes.
требования
Basic knowledge of how web applications work and common security vulnerabilities.
Basic hands-on experience with Burp Suite, Nmap, and similar tools.
Basic knowledge of Windows and Linux operating systems.
Knowledge of how networks work and of the main protocols (TCP/IP, DNS, HTTP/HTTPS).
Strong analytical thinking and problem-solving skills.
Willingness to conduct independent research and learn new things.
Ability to clearly explain and document technical findings.
Ability to read and understand technical materials in English.
Будет плюсом: Experience participating in bug bounty programs; Participation in CTF competitions, and practical work on Hack The Box, TryHackMe, and similar platforms; Technical articles on cybersecurity projects or research conducted; Ability to write simple scripts in Python, Bash, or PowerShell; Knowledge of mobile application security or Active Directory environments; eJPT, CPTS, OSCP, and other relevant certifications; Practical experience gained in labs, projects, research, and bug bounty programs will be taken into consideration; More than the number of certifications or tools used, we value the candidate’s analytical thinking, how they investigate a problem, verify a finding, and explain their conclusions
