Senior Cybersecurity

Що робити

• Plan and execute penetration tests and red-team exercises against web apps, mobile apps, APIs, microservices, cloud infrastructure, and internal tooling.
• Perform mobile application security testing (Android & iOS) — static and dynamic analysis, runtime instrumentation, SSL pinning bypass, local storage and secrets review, and reverse engineering.
• Discover and prove exploitability of vulnerabilities across network and application protocols (TLS, HTTP/2, gRPC, OAuth2/OIDC, SAML, WebSocket, DNS, mTLS), producing working PoCs and clear remediation guidance.
• Review cryptographic implementations — key management, TLS configuration, token signing/encryption, data-at-rest and in-transit protections — and catch misuse of crypto primitives.
• Conduct secure code review (Go/Python) and threat modeling for new services and features; embed security gates into our GitLab CI/CD pipelines.