Junior Offensive Security Engineer

Satispay; Italia; Ibrido; EUR 35.000 - 50.000; Tempo pieno

Descrizione del lavoro

A leading payment solutions provider based in Italy is looking for a Junior Offensive Security Engineer. In this role, you will be instrumental in securing cloud infrastructure and applications. You will perform penetration testing and assist in reviewing code for security flaws while collaborating with the security team. Ideal candidates should possess foundational knowledge of information security, have hands-on experience through internships or projects, and be eager to learn. The company offers excellent benefits, including unlimited paid time off and flexible working arrangements.

Servizi

Unlimited paid time off

Psychological support

Flexible hybrid working system

Professional development programmes

Stock Option Plan

Competenze

• Good knowledge of common web vulnerabilities.
• Experience from internships or personal research.
• Ability to read and write code in a scripting language.

Mansioni

• Perform penetration testing on mobile and web applications.
• Review source code for logic flaws and secure design patterns.
• Develop scripts for automation and proof-of-concept exploits.

Conoscenze

Information security basics

Networking

Web application architecture

Scripting in Python

Clear communication

Formazione

0-2 years of experience

Strumenti

Burp Suite

Nmap

Descrizione del lavoro

About Satispay

Satispay was born to revolutionise everyday payments - making them simple, fair, and accessible to everyone. Now, the focus has moved even further, aiming to shape the future of money.

We're a movement empowering millions of people, driven by a shared purpose to tackle big challenges. And we're just getting started. We move quickly, think boldly, and trust each other to challenge the norm, learning and growing as we go.

If you’re looking for more than just your next job - if you want to build something impactful with a talented team - you’re in the right place.

Role Overview

As a Junior Offensive Security Engineer, you’ll support our team in securing our cloud infrastructure, mobile, and web applications. This is a growth‑oriented role where you will learn to identify vulnerabilities and help enhance our detection and mitigation strategies.

Here’s what your day‑to‑day will look like:

• Penetration testing – Perform penetration testing on mobile (iOS & Android) and web applications. Under the guidance of a senior engineer, you’ll use tools like Frida to bypass security controls and analyse app behaviour at runtime.
• Code and architectural review – Develop the ability to review source code for logic flaws, collaborate with developers to implement secure design patterns, and assist in reviewing cloud infrastructure for full security coverage.
• Scripting & automation – Develop scripts to automate repetitive testing tasks, create proof‑of‑concept exploits, and parse tool results to help the team move faster.
• Collaborate on defense – Work closely with the rest of the Security team to test monitoring capabilities, participate in attack simulations, and help improve overall detection strategies.
• Documentation and Reporting – Write technical reports of findings and help document remediation steps for development teams.

Expect challenges, collaboration, and the freedom to bring your ideas to life. Things change quickly here, so be ready to adapt, take initiative, and shape your role as we grow.

Who we’re looking for

We need a problem‑solver who loves teamwork and gets things done. If you’re curious and ready for real ownership, you’ll fit in! Does this sound like you?

• Strong Foundations – Good knowledge of information security basics, networking, web application architecture, and familiarity with common web vulnerabilities (SQL injection, XSS, IDOR, race conditions).
• Hands‑on Experience – 0‑2 years of experience. This could be from internships, university projects, active CTF participation, bug bounties, or personal research.
• Curious Mindset – You don’t just want to run a tool; you want to figure out how business logic can be bypassed and understand the “why” behind each vulnerability.
• Scripting Skills – Ability to read and write code in at least one scripting language (e.g., Python) for task automation and creating simple proof‑of‑concepts.
• Interest in Mobile Security – A strong interest in learning how to secure Android and iOS apps. Any exposure to Frida or Objection is a great starting point.
• Soft Skills – Clear communication, eagerness to learn, and proven capability of working collaboratively in a team environment.

Nice‑to‑have

• Previous contributions to open‑source security tools or published CVEs/advisories.
• Cybersecurity certifications (e.g., eJPT, OSCP, PortSwigger certifications).
• Experience with standard penetration testing tools such as Burp Suite and Nmap.
• Familiarity with AWS or other cloud environments.

Our benefits & perks

We believe high commitment, effort, and impact deserve to be highly rewarded and supported. That’s why we created Satispay CareAbout, our way of making sure you’re supported in your well‑being, growth, and finances:

CareAbout health & wellbeing

• Unlimited paid time off
• Psychological support & mental health webinars with Serenis
• Flexible hybrid working system
• Extended parental leave
• Childcare leave
• Health Coverage

CareAbout growth & development

• Professional development programmes
• Internal mobility program
• Language classes with Preply
• Internal workshops & training

CareAbout financial support

• Stock Option Plan (with additional grants often provided based on performance)
• International relocation support
• Competitive salary
• Flexible Benefit budget
• Meal vouchers

Our selection process

Our selection process is tailored to each role and includes at least a call with our Talent Acquisition Team, a technical evaluation, and a final in‑person meeting. Your recruiter will share more insights during your first meeting with us!

Equal‑Opportunity Employer

At Satispay, we’re proud to be an equal‑opportunity employer. We celebrate diversity and inclusion, welcoming individuals of all backgrounds. This opportunity is open to everyone, regardless – for instance – of race, colour, religion, sex, gender identity, sexual orientation, and national origin. Join us in a workplace where everyone belongs!

Learn more about us

Curious if our way of working clicks with yours? Our values and pillars aren’t just fancy words on a page – they really shape everything we do. Explore them here.

Sounds like your kind of place?

Awesome! We’d love to hear your story.