Web Penetration Tester

Cyrex; Rio de Janeiro; Presencial; BRL 80.000 - 100.000; Tempo integral

Resumo da oferta

A dynamic tech company in Rio de Janeiro seeks a cybersecurity expert for exciting projects in the video games industry. You will conduct penetration testing and review security protocols, ensuring web and mobile apps are secure. Ideal candidates have 5+ years in penetration testing, strong OWASP Top 10 knowledge, and skills in Burp Suite and mobile security. This project-based position offers competitive pay and a chance to work in a diverse, fast-paced environment.

Serviços

Competitive salary

Ongoing training opportunities

Diverse gaming projects

Qualificações

• 5+ years in web and mobile penetration testing.
• Strong OWASP Top 10 knowledge.
• Basic cloud security knowledge.
• Manual testing first mindset.
• Deep Burp Suite knowledge.

Responsabilidades

• Penetration testing of web apps, mobile apps and REST & GraphQL APIs.
• Review source code for security issues.
• Assess mobile app protections.
• Produce clear reports with PoCs and remediation guidance.

Conhecimentos

Penetration testing

Web security

Mobile hacking

Basic cloud security

OWASP Top 10 knowledge

Source code review

Ferramentas

Burp Suite

Frida

apktool

jadx

Descrição da oferta de emprego

Cyrex, a Magic Media company, is a media and tech start-up powered by creativity and innovation. We work with leading developers and publishers in the games industry, providing support and solutions designed around individual needs and carried out by global experts.

We produce high-quality results by constantly staying at the forefront of modern technology and cutting-edge processes and practices. The best of our team are known for their strong initiative, not just in taking care of their day-to-day responsibilities but in helping identify ways to build, grow, and do more in their work.

We’re currently looking for adynamic addition tothe team tohelp work onexciting cybersecurity and development projects for the video games industry. The ideal candidate will work with cross-functional teams todevelop critical products and services for our clients and offer excellent technical support toour teams. Ifyou’re anenthusiastic, motivated, and lateral thinker, our team iswaiting tomeet you!

This is a project based position, ideal for someone skilled in web security, mobile hacking, and basic cloud security. It does not require deep knowledge of reverse engineering or low-level networking.

Responsibilities

• Penetration testing of web apps, mobile apps and REST & GraphQL APIs.
• Review source code for security issues.
• Assess mobile app protections (certificate pinning, jailbreak/root detection, code obfuscation) and backend integrations.
• Produce clear reports with PoCs and remediation guidance; verify fixes.

• 5+ years in web and mobile penetration testing.
• Strong OWASP Top 10 knowledge.
• Basic cloud security knowledge.
• Manual testing first mindset, deep burp suite knowledge.
• Reporting: clear flaws write-ups.
• Source code review skills: sinks/sources, ability to spot misconfigurations.

Working knowledge of

• Basic python skills.
• Frida, apktool, jadx

• Burp suite plugins creation would be a plus.

• An opportunity to hone and improve your skills by applying them to a diverse variety of gaming projects
• The chance to work closely with a team of like-minded creative professionals in a fast-paced, multicultural environment on a variety of gaming projects
• A competitive salary
• Ongoing training and professional self-improvement opportunities

If this sounds interesting to you and you’d like to be at the forefront of cybersecurity, we’d love to hear from you.