Remote Pentester - Penetration tester @ LogicalTrust in LogicalTrust

What does our recruitment process look like? The recruitment process is divided into several stages, we present it transparently below: Initial task - approx. 20-45 minutes. If you find it difficult, it's probably not time to continue applying it! But we support your development, we will be happy to see your solution and send you some tips on how to develop! The actual task - approx. 2 hours + 1-2 hours to finalize it. Interview - approx. 30-75 minutes of conversation and solving tasks via audio-video :) Assuming that you go through all stages, the entire recruitment should take from 3 to 6 hours. Recruitment (initial) task On the task.zostansecurity.ninja website (redirection in the APPLY icon) there is a task, the solution of which will give you the address to which you should send your application. We will respond to every report! Before you send your application Our recruitment is based largely on practical tasks (we probably won't ask you "if you were to be some class of error, what class would you be and why?"). Before you send your application, you can read the presentation and make sure you understand the issues. with whom we work on a daily basis. You can find the presentation and more information on our website zostansecurity.ninja About us: We work in an environment where technical knowledge is important, not the number of certificates you have, fame in the industry or the number of people following you on X We are a distributed company - our work is not an eternal "home office". We created the company from the beginning based on remote cooperation. Thanks to our focus on such cooperation, we also have developed communication methods, tools and procedures that enable us to operate effectively and exchange knowledge! - we work remotely, but that doesn't mean we don't see each other. Several times a year, we organize meetings during which we have the opportunity to visit different cities in Poland. We are a small company and we want to remain that way - thanks to this, we have developed an atmosphere, a specific sense of humor and a work culture that we value very much. Honesty - we focus on open communication, we are honest with each other. This allows us to improve personally and translates into the quality of our work and our relationships. Sometimes we make mistakes - we treat them as an opportunity to grow, we talk about them openly, we analyze the reasons, we do not look for those to blame. We are looking for systemic changes that will allow us to optimize our activities in the future. Working with true enthusiasts. We support development. Possibility to participate in internal research (research & destroy) - we support the development of our own security-related projects. We publish the results of this work at conferences or on our blog. Normal work atmosphere, we will tolerate your tracksuit and flip-flops. We highly respect the private time of our employees. We make sure we don't work overtime. We do not impose ourselves during holidays. We are looking for a technically proficient, independent, brilliant person who is passionate about breaking security. Able to look at problems from a broader perspective thanperspectives of OWASP TOP 10, ASVS, any other methodology, standard or document. It doesn't have to be a senior, a world champion or a person with 10 certificates. In exceptional cases, it may be a junior, provided that it is his passion, he learns quickly and he is not afraid to delve into new topics. What we require Experience - we require commercial experience, not necessarily in the security world, we will appreciate working with network infrastructure, programming, cloud, devops or other IT areas! Self-discipline - we will take care of your technical development, but you must also demonstrate considerable self-discipline resulting from the nature of remote work. You need to be able to prioritize tasks, not sweep problems under the rug and work efficiently when no one is standing over you and patting you on the shoulder. Willingness to learn and constantly develop - we believe that being a pentester is not only a job, but to some extent also a lifestyle. You must constantly expand your knowledge and cultivate curiosity that constantly motivates you to ask "why?" Knowledge of techniques for breaking the security of web applications and (mobile applications or infrastructure). and a strong desire to develop in other areas of security. About 70% of your work will be related to web applications, but there will also be other projects in which you will need to expand your knowledge in other areas. Programming skills - at a level that allows you to understand code in popular languages ​​and create tools to support tests. Knowledge of the GNU/Linux system - at a level that allows you to freely navigate the system. You can describe vulnerabilities in Polish and English - it is important that you can clearly document the found vulnerabilities and communicate clearly with the client or other team members. The ability to find errors at least at the OWASP Top 100 level. Responsibility. Self-discipline. Willingness to learn. Willingness to play in the first league! Enthusiasm for work Ability to communicate in basic English (description of susceptibility) Ability to communicate and work in a group Honesty Ability to admit a mistake We require from a mid: Has features and skills typical of the Junior level, and in addition: Proficiency in at least one area (mobile, networks, ...) Knowledge of many technologies (at an average level) (Linux, Java, PHP, iOS...) Ability to create tools supporting pentests Ability to document one's work Deep technical understanding of vulnerabilities in given areas Ability to search for vulnerabilities based on source code Ability unsupervised work Technical understanding of vulnerabilities (in full!) Experience (or equivalent replacing it - e.g. third eye allowing for finding vulnerabilities) Constantly updated knowledge about the latest errors/threats Excellent communication and teamwork skills Ability to implement projects from "a" to " z" Good communication skills in English (communication with external entities) Proactive action We require from a senior:Has features and skills typical of the Junior and Mid levels, in addition to: Proficiency in at least several areas (mobile, networks, ...) Knowledge and experience in working with many technologies Free ability to create tools supporting pentests (programming) Ability to support less experienced users team members Ability to quickly learn new technologies Publications (conferences, vulnerabilities, articles...) What our recruitment process looks like The recruitment process is divided into several stages, we present it transparently below: Initial task - approx. 20-45 minutes. If you find it difficult, it's probably not time to continue applying it! But we support your development, we will be happy to see your solution and send you some tips on how to develop! The actual task - approx. 2 hours + 1-2 hours to finalize it. Interview - approx. 30-75 minutes of conversation and solving tasks via audio-video :) Assuming that you go through all stages, the entire recruitment should take from 3 to 6 hours. Recruitment (initial) task On the task.zostansecurity.ninja website (redirection in the APPLY icon) there is a task, the solution of which will give you the address to which you should send your application. We will respond to every report! Before you send your application Our recruitment is based largely on practical tasks (we probably won't ask you "if you were to be some class of error, what class would you be and why?"). Before you send your application, you can read the presentation and make sure you understand the issues. with whom we work on a daily basis. You can find the presentation and more information on our website zostansecurity.ninja About us: We work in an environment where technical knowledge is important, not the number of certificates you have, fame in the industry or the number of people following you on X We are a distributed company - our work is not an eternal "home office". We created the company from the beginning based on remote cooperation. Thanks to our focus on such cooperation, we also have developed communication methods, tools and procedures that enable us to operate effectively and exchange knowledge! - we work remotely, but that doesn't mean we don't see each other. Several times a year, we organize meetings during which we have the opportunity to visit different cities in Poland. We are a small company and we want to remain that way - thanks to this, we have developed an atmosphere, a specific sense of humor and a work culture that we value very much. Honesty - we focus on open communication, we are honest with each other. This allows us to improve personally and translates into the quality of our work and our relationships. Sometimes we make mistakes - we treat them as an opportunity to grow, we talk about them openly, we analyze the reasons, we do not look for those to blame. We are looking for systemic changes that will allow us to optimize our activities in the future. Working with true enthusiasts. We support development. Possibility to participate in internal research (research & destroy) - we support the development of your own projects related to securityroast. We publish the results of this work at conferences or on our blog. Normal work atmosphere, we will tolerate your tracksuit and flip-flops. We highly respect the private time of our employees. We make sure we don't work overtime. We do not impose ourselves during holidays. ,[Performing security tests: mainly web applications (approx. 70% of the working time), but also learning and development in the area of ​​networks, mobile applications, hardware... (approx. 30%), describing found vulnerabilities, Participation in secret operations - sometimes we want to take off our tracksuits, put on a ninja outfit and perform a special mission. Throw a pendrive over a fence, drive around the city in a car with black windows, walk through a triple wall of fire or find a 0-day in the solutions used by the client! Most of your working time will be focused on finding vulnerabilities - you won't spend time in meetings or sculpting documents in text editor. Our employees value the ratio of technical work to everything else. We delegate responsibility - each member of our team runs selected projects in which he or she serves as a leader, responsible for its implementation. , You will contact the client, take care of individual stages of the project and make decisions, without the burdensome waiting until you gain approval for your actions. If you like to be independent and responsible because it brings you satisfaction, LT is the perfect place for you! If you need to have a "receipt" for every action, there are places where you will do better... ] Requirements: web applications, Security, Linux, Cybersecurity, Cryptography, Cloud security, Operating system, mobile applications, network, OWASP, Kubernetes, Python, Windows, OSCP, Kerberos Tools: Zosia. Additionally: Training budget, Private healthcare, Flat structure, Small teams, International projects, No dress code, Startup atmosphere, In-house trainings, Possibility to work from the office in Wrocław, Quarterly bonuses, Annual bonuses, Quarterly integrations (away), Integration games in online puns, Friendly atmosphere, Sense of humor, Possibility to participate in conferences, High autonomy, Work-life balance.