Penetration Tester - Europe (m/f/d)

Your Mission

Greetings, fellow explorer of the digital realms!

We’re excited to introduce a pivotal role that bridges our advanced technology with strong cyber defenses. Curious what this quest involves? Let’s dive in:

• Conduct comprehensive security assessments and penetration tests on web applications, mobile apps, and associated systems.

• Identify, validate, and document vulnerabilities, provide actionable remediation recommendations, and track their resolution.

• Create detailed penetration testing reports, offering clear risk analyses and in-depth exploitation details.

• Stay alert to emerging threats by keeping up with the latest vulnerabilities, attack techniques, and defense strategies.

• Contribute your expertise to incident response and security investigations as needed.

• Knowledge and experience with bug bounty programs and their processes are highly valued.

Your Profile

That was intriguing, wasn’t it? Here’s what will help you thrive and enjoy this role:

• 3–5 years of hands-on experience in information security or dedicated penetration testing roles.

• Strong expertise in identifying web security vulnerabilities such as SQL Injection, XSS, CSRF, and file upload issues.

• Proficiency in mobile application security testing for both Android and iOS platforms.

• Skilled with industry-standard security tools, including Burp Suite, Nmap, and Metasploit. Familiarity with programming languages like Python or JavaScript is an advantage.

• Excellent communication and documentation skills in both English and Chinese (C1 level for both).

• Practical experience with bug bounty programs is a plus.

• Strong analytical thinking, keen attention to detail, and the ability to clearly communicate technical findings to diverse audiences.

• Experience in large-scale internet or cloud environments is preferred.

Why Us?

Become part of an international, collaborative team where you’ll help shape security operations from the ground up. You’ll tackle meaningful challenges in cloud security and incident response, directly advancing the company’s security maturity. This role provides the unique opportunity to work closely with engineering, operations, and management teams in a dynamic, fast-paced environment.