Penetration Tester

.msg Romania is a tech company with strong knowledge in software development, business consulting, and various project and product development methodologies, with a large portfolio of clients from different domains such as Automotive, Insurance, Banking, etc. We are part of the msg group, an international consortium of companies with over 10,000 experts in 28 countries represented in the world's most important markets.

We carry out numerous penetration tests for a big stock market company. The focus is on web applications and web services, but mobile applications are also examined.

The company gets all of the business-critical applications tested regularly, many of them with the help of our team. The methodology is entirely up to us; we do follow the OWASP Web Testing Guide.

Most of the work consists of “real pentesting” and not of writing PDF documents and summaries. This means that, in your role as a pentester, you will participare to kickoffs, will ensure all preparations on the client side (access, etc.), will carry out the pentest and then you will be able to send out the Resolution-Excel (written in English) to the client.

Worth mentioning is also the fact that you will be supported by experienced team members. We are a young and relatively small team with different skills, consisting of six pentesters and one dispatcher (average age: 30).

• In-depth knowledge of relevant tools (e.g. Kali Linux, Metasploit, Burp, Nessus, Nmap, SQLMap)
• Knowledge of REST-APIs
• Knowledge of web applications
• Ideally: certifications in the area of IT security or penetration testing (e.g. OSCP, OSCE, CEH, GPEN, GWAPT, CISSP)
• Optional: Basic knowledge in exploit development (e.g. languages as Perl, Python, Java)
• Optional: source code review assisted by SAST (Fortify scan)

• Responsible to perform a complete web penetration test of a given application
• Responsible to describe findings (like XSS, privilege escalation, vulnerable software etc.) into an Excel report
• Performing a review for colleague's Resolution-Excel
• Help others, if they have questions with regards to special cases, but also get help whenever it is necessary
• Let the customer know if accounts / access to system is not available
• Provide the Resolution-Excel (after it has been checked with one other team member)

• Rewarding bonus plan
• 30 RON/day meal tickets
• Up to 30 days of annual leave
• Private health insurance
• Flexible schedule
• Access to technical events (trainings, workshops, conferences, online training websites and internal study groups to support growth)
• Access to our wellness program
• Free online and offline workoutsTeam events (teambuilding, parties, sports, CSR, and others)
• Bookster subscription
• Internal support programs for parents
• A culture based on common values and interests