Ethical Hacker & Penetration Testing Expert

Crs Soft; Fatih; On-site; TRY 400,000 - 640,000; Full time

Benefits offered by this job

Buffet breakfast

Education fund

Birthday off

Gift book

Tech equipment and licenses

Expert Q&A sessions

Marriage leave

No dress code

Job summary

Crs Soft in Istanbul seeks a Security Engineer to act as an internal ethical hacker. You will identify and help remediate vulnerabilities across web apps, mobile apps, and network infrastructure, enabling secure, robust technologies for customers worldwide.

We value hands-on security expertise, scripting ability, and cloud/container security know-how, along with strong written and spoken English to follow global trends and documentation.

Qualifications

• BS degree in Computer Engineering, Cyber Security, or related field.
• Experience in Penetration Testing and Vulnerability Management.
• Proficiency with Burp Suite Pro, Metasploit, Nmap, Nessus, SQLMap, and Kali Linux.
• Strong knowledge of OWASP Top 10 and SANS Top 25 vulnerabilities.
• Hands-on with Firewalls, IDS/IPS, WAF, VPNs.
• Scripting skills in Python, Bash, or PowerShell.
• Familiarity with Azure/AWS and Docker/Kubernetes from an offensive perspective.
• Relevant certifications (OSCP, eJPT, GPEN) are a huge plus.
• Strong analytical thinking and hacker mindset.
• Good command of English to follow global security trends.

Responsibilities

• Execute end-to-end penetration tests on web applications, mobile apps (iOS/Android), and network infrastructure.
• Conduct regular vulnerability assessments and security scans using both automated tools and manual techniques.
• Develop and implement exploit proofs to demonstrate the impact of discovered vulnerabilities.
• Evaluate detection capabilities by validating security alerts through simulated attack scenarios.
• Collaborate with developers to provide clear, actionable remediation guidance and verify fixes.
• Automate security testing by integrating tools into our CI/CD pipelines (DevSecOps).
• Stay ahead of the curve by researching the latest threats, zero-day vulnerabilities, and bypass techniques.
• Draft detailed technical reports for both technical teams and management, outlining risks and mitigation strategies.

Skills

Penetration testing

Vulnerability management

Scripting (Python/Bash/PowerShell)

Cloud security

Container security

English proficiency

Education

BS in Computer Engineering or Cyber Security

Tools

Burp Suite Pro

Metasploit

Nmap

Nessus

SQLMap

Kali Linux

Docker

Kubernetes

Job description

Crs Soft in Istanbul seeks a Security Engineer to act as an internal ethical hacker. You will identify and help remediate vulnerabilities across web apps, mobile apps, and network infrastructure, enabling secure, robust technologies for customers worldwide.

We value hands-on security expertise, scripting ability, and cloud/container security know-how, along with strong written and spoken English to follow global trends and documentation.