Internship – Penetration Tester Intern (Web & Internal Systems)
⚲ Warszawa
Do uzgodnienia
Wymagania
- OWASP TOP 10
- Python
Opis stanowiska
About our Team
Samsung Electronics is putting a lot of effort into security of the both final product and internal applications. Verification of the level of security is done through a variety of methods, including blackbox or whitebox testing.
As part of the project, we are pentesting a lot of web applications and we are looking for an expert for this.
Role and Responsibilities
• Perform penetration testing of Samsung products and services.
• Conduct vulnerability assessments, identify and exploit vulnerabilities.
Skills and Qualifications
• Knowledge of security aspects including OWASP Top 10.
• Knowledge of IT security at a technical level.
• Basic knowledge of Python programing language.
Nice to have
• Familiarity with testing tools such as Burp Suite, OWASP ZAP, Nessus, nmap, IDA, Ghidra, Rradare2, Kali Linux.
• Knowledge of web application source code analysis techniques.
• Knowledge of operating system internals.
• Experience with fuzzing techniques with usage tools like AFL (American Fuzzy Lop), libFuzzer, Peach, beStorm, Synopsys Defensics.
• Knowledge about security of cloud solutions (especially AWS).
• Familiarity with static analysis tools (SAST) e.g. Semgrep.
We offer
Internship conditions:
• Competitive salary
• Flexible working hours
• Cooperation based on a civil law contract - up to 24 months
Team:
• Possibility to learn from world-class experts in a friendly atmosphere
• Integration budget
Equipment:
• PC workstation/Laptop
Benefits:
• Variety of discounts (Samsung products, theaters, restaurants)
• Free access to Copernicus Science Center for you and your friends
• Chillout rooms
• Variety of tea, coffee and fresh fruits/vegetables
Location:
• Office in Warsaw Spire near metro station
Samsung Electronics is putting a lot of effort into security of the both final product and internal applications. Verification of the level of security is done through a variety of methods, including blackbox or whitebox testing.
As part of the project, we are pentesting a lot of web applications and we are looking for an expert for this.
Role and Responsibilities
• Perform penetration testing of Samsung products and services.
• Conduct vulnerability assessments, identify and exploit vulnerabilities.
Skills and Qualifications
• Knowledge of security aspects including OWASP Top 10.
• Knowledge of IT security at a technical level.
• Basic knowledge of Python programing language.
Nice to have
• Familiarity with testing tools such as Burp Suite, OWASP ZAP, Nessus, nmap, IDA, Ghidra, Rradare2, Kali Linux.
• Knowledge of web application source code analysis techniques.
• Knowledge of operating system internals.
• Experience with fuzzing techniques with usage tools like AFL (American Fuzzy Lop), libFuzzer, Peach, beStorm, Synopsys Defensics.
• Knowledge about security of cloud solutions (especially AWS).
• Familiarity with static analysis tools (SAST) e.g. Semgrep.
We offer
Internship conditions:
• Competitive salary
• Flexible working hours
• Cooperation based on a civil law contract - up to 24 months
Team:
• Possibility to learn from world-class experts in a friendly atmosphere
• Integration budget
Equipment:
• PC workstation/Laptop
Benefits:
• Variety of discounts (Samsung products, theaters, restaurants)
• Free access to Copernicus Science Center for you and your friends
• Chillout rooms
• Variety of tea, coffee and fresh fruits/vegetables
Location:
• Office in Warsaw Spire near metro station
🔍 Dekoder Ogłoszenia
🔴
As part of the project, we are pentesting a lot of web applications and we are looking for an expert for this.
Szukamy kogoś, kto już potrafi robić pentesting, a nie kogoś, kogo będziemy uczyć od zera.
🟡
Knowledge of security aspects including OWASP Top 10.
Oczekiwana jest podstawowa wiedza teoretyczna, a nie praktyczne doświadczenie w wykorzystaniu tych luk.
🟡
Basic knowledge of Python programing language.
Prawdopodobnie będziesz musiał pisać proste skrypty, a nie tworzyć zaawansowane narzędzia.
🟡
Possibility to learn from world-class experts in a friendly atmosphere
Możesz się wiele nauczyć, ale niekoniecznie będziesz miał dużo samodzielności.
🔴
Cooperation based on a civil law contract - up to 24 months
Umowa cywilnoprawna może oznaczać brak niektórych świadczeń pracowniczych i mniejszą stabilność zatrudnienia.