KPMG·Астана
Technical Cybersecurity Specialist (Middle Pentester)
Ориентир по рынку≈ 900 – 1 400 $наш грубый ориентир по 200 вакансиям этого грейда на рынке, без учёта специальности: у работодателя вилка не указана
ГибридJuniorПолная занятостьопубликовано 4 дн назад
≈ 900 – 1 400 $наша приблизительная оценка
Описание
Разбор
Подготовить откликОтклик
История
Вакансия на английскомПереведёт заголовок и описание вакансии на русский
Наша компания
We’re seeking a skilled and motivated Middle Penetration Tester to join our Cybersecurity team in Astana/Almaty and support clients in identifying and addressing security vulnerabilities. In this role, you’ll participate in penetration testing engagements, assess organizations’ security posture, analyze potential threats, and help develop effective remediation strategies for clients across industries, including financial services and public sector.
Наши требования
A Bachelor’s or Master’s degree in Information Technology, Cybersecurity, or a related field
1+ years of relevant experience in penetration testing, application security, cybersecurity consulting, or related areas
Knowledge of Windows, Unix/Linux, TCP/IP, IDS/IPS, and web content filtering technologies
Fluency in English (written and spoken)
An understanding of IT General Controls and cybersecurity frameworks (e.g., NIST Cybersecurity Framework, ISO 27001)
Experience with at least one object-oriented programming language (Python, Ruby, Java, etc.)
Hands-on experience with cybersecurity learning platforms such as Hack The Box, TryHackMe, or PortSwigger
Experience participating in Capture The Flag (CTF) competitions
Relevant certifications such as OSCP or CPTS
Дополнительно
Conduct penetration testing activities to identify vulnerabilities and assess the effectiveness of clients’ security controls
Perform security assessments of technical infrastructure, including host-based log analysis and network analysis to identify potential compromises
Analyze security testing results and provide recommendations for remediation of identified vulnerabilities
Support the development of clear and comprehensive security assessment reports for clients
Participate in cybersecurity projects, collaborate with team members, and contribute to improving clients’ information security posture
Если вас просят заплатить, продиктовать код или установить непонятное приложение, прекратите общение и напишите нам в чат с основателем или через форму обратной связи.