Security Engineer (Pentester) at Mayflower
Limassol, CY, Cyprus
Posted
full_time
Apply for this role at Mayflower
Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement. We are developing a partner advertising high-load system with a large RPS, convenient and modern interface. We are growing exponentially and successfully implementing new technologies to accelerate this growth and the system as a whole. Now we look for a Security Engineer to join our team JOB RESPONSIBILITIES * Conduct penetration testing of web applications, APIs, and infrastructure to identify security vulnerabilities. * Perform manual security assessments and advanced exploitation of discovered vulnerabilities. * Collaborate with engineering and DevOps teams to improve security of applications and infrastructure. * Prepare detailed penetration testing reports with clear technical descriptions and remediation recommendations. * Continuously research new attack techniques, vulnerabilities, and security trends. * Assist in developing and improving internal security testing methodologies and tools. * Support the implementation of secure development practices within the organization. * Experience in web application penetration testing. * Good knowledge of API and network security testing. * Strong understanding of Linux and web infrastructure. * Experience with common pentesting tools (Burp, Nmap, Metasploit, sqlmap, ffuf, etc.). * Understanding of authentication, sessions, and common web vulnerabilities. * Experience with manual security testing and vulnerability analysis. * Familiarity with OWASP / PTES / security testing methodologies. * Ability to write clear vulnerability reports. * Professional English proficiency. * Strong analytical mindset with high attention to detail. * Effective communication, collaboration skills, and strong sense of ownership. That can be a plus: * Experience participating in bug bounty programs. * Experience with automation of security testing using scripting languages such as Python, Go, or Bash. * Experience with container security testing. * Experience in red teaming exercises. * Experience performing infrastructure penetration testing in Linux environments. * Experience with security research and vulnerability disclosure. * Contributions to security tools, blogs, or research publications. * Relevant certifications (optional but beneficial): OSCP, OSWE, eWPT / eWPTX, PNPT, CREST, CEH, GWAPT. CONDITIONS We know that great talent deserves great conditions, so here's what you can expect when joining us: * EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family. * Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free. * Transparent performance reviews twice a year, with bonus opportunities and salary adjustments. * Private medical insurance for you and your family, a corporate mobile plan (unlimited in Cyprus with roaming included), and interest-free support for car purchases. * Mindfulness & well-being support, including psychological assistance with 50% coverage. * 50% coverage of school and kindergarten fees for your children. * Fully covered sports benefits, and also access to in-house electric scooters and bike rentals, and cycling purchase compensation. * Investment in your growth: paid language courses and access to suited-for-you development programs, including conferences, training programs, and coaching to support your professional journey. * A culture of recognition: a peer reward program to celebrate your contributions. * A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration. * Free catering in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks. * A strong engineering culture: international teams, corporate events, team buildings, and hackathons—because great work happens in great communities. RECRUITMENT PROCESS * HR interview (40 min); * Technical interview (1.5 hour); * Final interview (45 min). * Point of contact: Daria Goriacheva * vacancy_type: Security and DevSecOps * Experience shown on site: 3+ years of experience