JustJoin.IT Hybrydowo Junior

Internship – Penetration Tester Intern (Web & Internal Systems)

Samsung R&D Institute Poland

⚲ Warszawa

Do uzgodnienia

Wymagania

  • OWASP TOP 10
  • Python

Opis stanowiska

About our Team
Samsung Electronics is putting a lot of effort into security of the both final product and internal applications. Verification of the level of security is done through a variety of methods, including blackbox or whitebox testing.
 
As part of the project, we are pentesting a lot of web applications and we are looking for an expert for this.
 

Role and Responsibilities
• Perform penetration testing of Samsung products and services.
• Conduct vulnerability assessments, identify and exploit vulnerabilities.
 

Skills and Qualifications
• Knowledge of security aspects including OWASP Top 10.
• Knowledge of IT security at a technical level.
• Basic knowledge of Python programing language.
 

Nice to have
• Familiarity with testing tools such as Burp Suite, OWASP ZAP, Nessus, nmap, IDA, Ghidra, Rradare2, Kali Linux.
• Knowledge of web application source code analysis techniques.
• Knowledge of operating system internals.
• Experience with fuzzing techniques with usage tools like AFL (American Fuzzy Lop), libFuzzer, Peach, beStorm, Synopsys Defensics.
• Knowledge about security of cloud solutions (especially AWS).
• Familiarity with static analysis tools (SAST) e.g. Semgrep.

 

We offer
Internship conditions:
• Competitive salary
• Flexible working hours
• Cooperation based on a civil law contract - up to 24 months
Team:
• Possibility to learn from world-class experts in a friendly atmosphere
• Integration budget
Equipment:
• PC workstation/Laptop
Benefits:
• Variety of discounts (Samsung products, theaters, restaurants)
• Free access to Copernicus Science Center for you and your friends
• Chillout rooms
• Variety of tea, coffee and fresh fruits/vegetables
Location:
• Office in Warsaw Spire near metro station

🔍 Dekoder Ogłoszenia

🔴
As part of the project, we are pentesting a lot of web applications and we are looking for an expert for this.
Szukają kogoś, kto już ma doświadczenie w pentestingu aplikacji webowych, mimo że ogłoszenie jest na staż.
🟡
Knowledge of security aspects including OWASP Top 10.
Oczekiwana jest podstawowa wiedza teoretyczna, a nie praktyczne umiejętności jej zastosowania.
🟡
Basic knowledge of Python programing language.
Może oznaczać od znajomości podstaw składni po umiejętność napisania prostego skryptu.
🟡
Possibility to learn from world-class experts in a friendly atmosphere
Może oznaczać, że będziesz pracować z doświadczonymi osobami, ale niekoniecznie będziesz miał dużo czasu na bezpośrednie mentorstwo.
🔴
Cooperation based on a civil law contract - up to 24 months
Umowa cywilnoprawna (np. zlecenie) może oznaczać brak niektórych świadczeń pracowniczych i mniejszą stabilność zatrudnienia niż umowa o pracę.