Junior Offensive Security Engineer

Satispay; Milano; Ibrido; EUR 40.000 - 50.000; Tempo pieno

Descrizione del lavoro

A leading payments technology company in Milan is seeking a Junior Offensive Security Engineer to enhance cloud and application security. You will conduct penetration testing, collaborate with developers on secure designs, and automate testing processes. Ideal candidates are problem solvers with knowledge of security basics and scripting skills. Join a dynamic team that values growth and diversity while shaping the future of payment technology.

Servizi

Unlimited paid time off

Psychological support

Flexible hybrid working system

Professional development programmes

Competitive salary

Competenze

• Good knowledge of information security and networking basics.
• Experience through internships or projects related to security.
• Ability to read and write code in scripting languages, e.g., Python.

Mansioni

• Perform penetration testing on mobile and web applications.
• Review source code for security flaws and collaborate with developers.
• Develop and automate testing scripts for efficiency.

Conoscenze

Information security basics

Networking

Web application architecture

Common web vulnerabilities

Scripting skills

Clear communication

Formazione

0–2 years of relevant experience

Strumenti

Burp Suite

Nmap

Frida

Objection

AWS

Descrizione del lavoro

Junior Offensive Security Engineer

About Satispay Satispay was born to revolutionise everyday payments – making them simple, fair, and accessible to everyone. Now, the focus has moved even further, aiming to shape the future of money. We’re a movement empowering millions of people, driven by a shared purpose to tackle big challenges. And we’re just getting started. We move quickly, think boldly, and trust each other to challenge the norm, learning and growing as we go. If you’re looking for more than just your next job – if you want to build something impactful with a talented team – you’re in the right place.

Role Overview

As a Junior Offensive Security Engineer, you’ll support our team in securing our cloud infrastructure, mobile, and web applications. This is a growth‑oriented role where you will learn to identify vulnerabilities and help enhance our detection and mitigation strategies. Here’s what your day‑to‑day will look like:

• Penetration testing – Perform penetration testing on mobile (iOS & Android) and web applications. Under the guidance of a senior engineer, you’ll use tools like Frida to bypass security controls and analyse app behaviour at runtime.
• Code and architectural review – Develop the ability to review source code for logic flaws, collaborating with developers to implement secure design patterns, and assisting in reviewing cloud infrastructure for full security coverage.
• Scripting & automation – Develop scripts to automate repetitive testing tasks, create proof‑of‑concept exploits, and parse tool results to help the team move faster.
• Collaborate on defense – Work closely with the rest of the Security team to test monitoring capabilities, participate in attack simulations, and help improve overall detection strategies.
• Documentation and Reporting – Write technical reports of findings and help document remediation steps for development teams.

Expect challenges, collaboration, and the freedom to bring your ideas to life. Things change quickly here, so be ready to adapt, take initiative, and shape your role as we grow.

Who we’re looking for

We need a problem‑solver who loves teamwork and gets things done. If you’re curious and ready for real ownership, you’ll fit in! Does this sound like you?

• Strong Foundations – Good knowledge of information security basics, networking, web application architecture, and familiarity with common web vulnerabilities (SQL injection, XSS, IDOR, race conditions).
• Hands‑on Experience – 0–2 years of experience. This could be from internships, university projects, active CTF participation, bug bounties, or personal research.
• Curious Mindset – You don’t just want to run a tool; you want to figure out how business logic can be bypassed and understand the “why” behind each vulnerability.
• Scripting Skills – Ability to read and write code in at least one scripting language (e.g., Python) for task automation and creating simple proof‑of‑concepts.
• Interest in Mobile Security – A strong interest in learning how to secure Android and iOS apps. Any exposure to Frida or Objection is a great starting point.
• Soft Skills – Clear communication, eagerness to learn, and proven capability of working collaboratively in a team environment.

Nice‑to‑have

• Previous contributions to open‑source security tools or published CVEs/advisories.
• Cybersecurity certifications (e.g., eJPT, OSCP, PortSwigger certifications).
• Experience with standard penetration testing tools such as Burp Suite and Nmap.
• Familiarity with AWS or other cloud environments.

Don’t worry if you don’t tick every box. We believe in the power of different viewpoints and strengths. Your unique perspective is important as we build something special. If you’re passionate and can make a difference, we truly encourage you to apply.

Our benefits & perks

We believe high commitment, effort, and impact deserve to be highly rewarded and supported. That’s why we created Satispay CareAbout, our way of making sure you’re supported in your well‑being, growth, and finances:

CareAbout health & wellbeing

• Unlimited paid time off
• Psychological support & mental health webinars with Serenis
• Flexible hybrid working system
• Extended parental leave
• Childcare leave
• Health Coverage

CareAbout growth & development

• Professional development programmes
• Internal mobility program
• Language classes with Preply
• Internal workshops & training

CareAbout financial support

• Stock Option Plan (with additional grants often provided based on performance)
• International relocation support
• Competitive salary
• Flexible Benefit budget
• Meal vouchers

Our selection process

Our selection process is tailored to each role and includes at least a call with our Talent Acquisition Team, a technical evaluation, and a final in‑person meeting. Your recruiter will share more insights during your first meeting with us!

Equal‑Opportunity Employer

At Satispay, we’re proud to be an equal‑opportunity employer. We celebrate diversity and inclusion, welcoming individuals of all backgrounds. This opportunity is open to everyone, regardless – for instance – of race, colour, religion, sex, gender identity, sexual orientation, and national origin. Join us in a workplace where everyone belongs!

Learn more about us

Curious if our way of working clicks with yours? Our values and pillars aren’t just fancy words on a page – they really shape everything we do. Explore them here.

Sounds like your kind of place?

Awesome! We’d love to hear your story.

#LI-Hybrid

#LI-GA1