هف هشتاد | Hafhashtad

کامپیوتر، فناوری اطلاعات و اینترنت ۲۰۱ تا ۵۰۰ نفر 780.ir/

استخدام Penetration Testing Engineer

این آگهی منقضی شده است

دسته‌بندی شغلی

وب،‌ برنامه‌نویسی و نرم‌افزار
موقعیت مکانی

تهران ، تهران
نوع همکاری

تمام وقت
حداقل سابقه کار

سه تا شش سال
حقوق

توافقی

شرح موقعیت شغلی

We are looking for a Penetration Tester to assess and strengthen our organization's security by identifying, exploiting, and documenting vulnerabilities in web applications, networks, mobile applications, cloud environments, and APIs. The ideal candidate will have a strong technical background in ethical hacking, vulnerability assessments, and security testing methodologies.

As a Penetration Tester, you will conduct simulated attacks to uncover security flaws, provide actionable remediation guidance, and work closely with development, IT, and security teams to improve overall cybersecurity posture.

Responsibilities:

enetration Testing & Vulnerability Assessment

Conduct penetration tests on web applications (such as GoLang, React, NodeJS, .Net), networks, mobile applications, APIs, and cloud environments.
Perform black-box, gray-box, and white-box testing based on project requirements.
Identify and exploit security vulnerabilities such as Injections, XSS, XSRF, RCE, SSRF, and privilege escalation.
Simulate real-world cyberattacks to assess an organization's security defenses.
Work with Blue Teams, SOC, and DevSecOps to improve security detection and response.

Security Research & Exploit Development

Research and test new attack techniques, exploit development, and bypass methods.
Develop custom scripts and automation to assist in penetration testing (Python, Bash, PowerShell).
Keep up with the latest security threats, vulnerabilities, and exploits (ExploitDB, CVE databases, MITRE ATT&CK).

Reporting & Remediation

Document findings, risks, and mitigation recommendations in professional penetration test reports.
Provide proof-of-concept (PoC) exploits and demonstrate security issues to stakeholders.
Work with developers and IT teams to remediate vulnerabilities and improve security controls.

Security Tooling & Automation

Utilize and configure penetration testing tools, including:
Burp Suite, OWASP ZAP, OWASP Nettacker, Nuclei, Nessus, OpenVAS, SQLMap, Frida
Metasploit, Nmap, Cobalt Strike, Wireshark, TCPDump
Focus on the relevant tools and techniques within Kali Linux.
Automate security testing and integrate security tools into DevSecOps CI/CD pipelines.

Security Compliance & Best Practices

Ensure compliance with security standards (OWASP, NIST, PCI-DSS, ISO 27001).
Help organizations achieve and maintain security certifications.
Provide guidance on secure coding practices to development teams.

Security Awareness & Training

Conduct security awareness training and workshops for developers and staff.
Assist in Red Team exercises and adversary simulation engagements.

Required Skills & Qualifications:

Technical Skills

✔ Strong understanding of penetration testing methodologies (PTES, MITRE ATT&CK, OWASP Top 10).

✔ Hands-on experience with vulnerability assessment and exploitation.

✔ Deep knowledge of web application security, API security, network security, and mobile security.

✔ Familiarity with exploit development and scripting (Python, Bash, PowerShell, Frida).

✔ Identify and exploit vulnerabilities related to authentication, authorization, and access control, including those within FreeIPA and LDAP environments.

✔ Proficiency in mobile app testing tools (e.g., Frida, MobSF, Apktool, ADB, JADX).

Soft Skills & Experience

✔ +4 years of experience in penetration testing, ethical hacking, or offensive security.

✔ Ability to work in fast-paced environments and handle multiple security assessments.

✔ Excellent analytical and problem-solving skills for breaking into systems.

✔ Strong communication and report-writing skills for documenting security findings.

ثبت آگهی استخدام در جابینجا

معرفی شرکت

شرکت هف‌هشتاد فعالیت خود را از بیش از دو دهه‌ی پیش با تمرکز بر ارائه خدمات نوآورانه در حوزه فناوری‌های مالی آغاز کرد و امروز به‌ عنوان یکی از بازیگران اصلی صنعت فین‌تک ایران شناخته می‌شود. این مجموعه با اتکا به رویکردی مبتنی بر نوآوری، امنیت و توسعه پایدار، همواره در مسیر طراحی راهکارهای دیجیتال برای تسهیل و ارتقاء تجربه کاربران در حوزه خدمات مالی حرکت کرده است.
هف‌هشتاد در مسیر توسعه و گسترش دامنه خدمات خود، وارد عرصه گردشگری نیز شده است و در تلاش است تا با ترکیب دانش تخصصی و زیرساخت‌های فنی قدرتمند، تجربه‌ای متفاوت و هوشمندانه در این حوزه خلق کند.
تیم هف‌هشتاد متشکل از جمعی از متخصصان با تجربه در حوزه‌های مختلف فناوری، طراحی محصول، تحلیل داده و بازاریابی است که با هدف خلق ارزش و پیشبرد مرزهای نوآوری، در محیطی پویا و حرفه‌ای فعالیت می‌کنند.
ما در هف‌هشتاد همواره به دنبال جذب افرادی هستیم که نگاه استراتژیک، روحیه حل مسئله و انگیزه رشد در یک اکوسیستم در حال توسعه را در خود دارند.