Security QA Engineer (Penetration Testing Focus)

Innowise has delivered more than 1,600 projects for clients worldwide.

• Perform penetration testing and vulnerability assessments of web applications and APIs
• Document identified vulnerabilities and provide clear, detailed remediation recommendations
• Support product owners and development teams in vulnerability remediation
• Apply security testing methodologies such as OWASP WSTG or equivalent application security frameworks
• Assess common web application vulnerabilities, including XSS, SQL Injection (SQLi), and SSRF
• Analyze vulnerability types, root causes, exploitation techniques, and remediation approaches
• Use application security testing software and penetration testing tools such as Kali Linux, Burp Suite, Metasploit, Nmap (NSE), and Acunetix

• Experience in mobile application penetration testing
• Experience in infrastructure penetration testing
• Comprehensive understanding of the Secure Software Development Lifecycle (SSDLC)
• Previous participation in bug bounty programs and/or Capture The Flag (CTF) competitions
• Relevant certifications such as BSCP, CWES, eMAPT, eWPT, OSCP+, or equivalent
• English proficiency at B1+ level or higher
• Будет плюсом: Additional certifications such as OSCP or CEH, knowledge of modern AI tools and practical experience using them in daily work

• Flexible work schedule
• Financial assistance
• Medical insurance