Penetration Tester

Samsung; Warszawa; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Private medical care

Multisport card

Life insurance

Lunch card

Language course subsidy

Discounts on Samsung products

Job summary

Samsung Electronics is seeking a security expert to join the team in Warsaw. The role focuses on pentesting web applications, performing vulnerability assessments, and reviewing code with developers to strengthen products and internal applications.

The position operates in a hybrid model with office presence at Warsaw Spire, offering exposure to cloud security, DevOps practices, and cutting-edge security technologies in a multidisciplinary environment.

Qualifications

• 3 years of experience in web application pentesting.
• Familiarity with testing tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, IDA, Ghidra, Radare2, Kali Linux.
• Familiarity with mechanisms of vulnerabilities from OWASP Top 10.
• Knowledge of web application source code analysis techniques.
• Good knowledge of Python programming language.

Responsibilities

• Penetration testing of our products and services.
• Vulnerability scanning and assessment.
• Code reviewing and cooperation with developers.

Skills

Penetration testing

Web application security

Python

Security tooling

Tools

Burp Suite

OWASP ZAP

Nessus

Nmap

IDA

Ghidra

Radare2

Kali Linux

Job description

Samsung Electronics is putting a lot of effort into security of the both final product and internal applications. Verification of the level of security is done through a variety of methods, including blackbox or whitebox testing.

As part of the project, we are pentesting a lot of web applications and we are looking for an expert for this.

• Penetration testing of our products and services.
• Vulnerability scanning and assessment.
• Code reviewing and cooperation with developers.

Skills and Qualifications

• 3 years of experience in web application pentesting.
• Familiarity with testing tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, IDA, Ghidra, Radare2, Kali Linux.
• Familiarity with mechanisms of vulnerabilities from OWASP Top 10.
• Knowledge of web application source code analysis techniques.
• Good knowledge of Python programing language.

Nice to have

• Knowledge about security of cloud solutions (especially AWS).
• Knowledge of security in CI/CD process and Devops philosophy.
• Familiarity with static analysis tools (SAST) e.g. Checkmarx, Semgrep or Synopsys Coverity.
• Knowledge about operating system internals especially Linux kernel.
• Knowledge of using AI in cybersecurity.

We offer

Team :

• Contract of employment – direct outsource
• Friendly working atmosphere
• Wide range of trainings
• Opportunity to work in multiple projects
• Multidisciplinary and multicultural team
• Working with the latest technologies on the market
• Monthly integration budget
• Possibility to attend conferences

Equipment :

• PC workstation + 2 external monitors
• Private medical care (possibility to add family members for free)
• Multisport card
• Life insurance
• Lunch card
• A partial reimbursement of the cost of an English language course
• Variety of discounts (Samsung products, theaters, restaurants)
• Unlimited free access to Copernicus Science Center for you and your friends
• Possibility to test new Samsung products

Location :

• Office in Warsaw Spire
• Working in a hybrid model – 3 days from the office per week