# Security Engineer (Pentester) at Mayflower

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Mayflower is a technology company that alters the entertainm

- **Company:** Mayflower (https://jobs.trythestack.co/companies/mayflower)
- **Location:** Limassol, CY, Cyprus
- **Employment type:** Full-time
- **Experience level:** 2–5 years
- **Visa sponsorship:** Not stated
- **Key skills:** Penetration Testing, Web Application Security, API Security Testing, Infrastructure Security, Vulnerability Analysis, Linux, Web Infrastructure, Burp, Nmap, Metasploit, Sqlmap, Ffuf, Authentication, OWASP, PTES, Report Writing
- **Posted by employer:** 2026-03-18
- **Added to The Stack:** 2026-03-30
- **Status:** May no longer be active (posted more than 60 days ago)
- **Apply:** https://mayflower.recruitee.com/o/security-engineer (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/security-engineer-pentester-mayflower

## About the role

Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement. We are developing a partner advertising high-load system with a large RPS, convenient and modern interface. We are growing exponentially and successfully implementing new technologies to accelerate this growth and the system as a whole. Now we look for a Security Engineer to join our team JOB RESPONSIBILITIES * Conduct penetration testing of web applications, APIs, and infrastructure to identify security vulnerabilities. * Perform manual security assessments and advanced exploitation of discovered vulnerabilities. * Collaborate with engineering and DevOps teams to improve security of applications and infrastructure. * Prepare detailed penetration testing reports with clear technical descriptions and remediation recommendations. * Continuously research new attack techniques, vulnerabilities, and security trends. * Assist in developing and improving internal security testing methodologies and tools. * Support the implementation of secure development practices within the organization. * Experience in web application penetration testing. * Good knowledge of API and network security testing. * Strong understanding of Linux and web infrastructure. * Experience with common pentesting tools (Burp, Nmap, Metasploit, sqlmap, ffuf, etc.). * Understanding of authentication, sessions, and common web vulnerabilities. * Experience with manual security testing and vulnerability analysis. * Familiarity with OWASP / PTES / security testing methodologies. * Ability to write clear vulnerability reports. * Professional English proficiency. * Strong analytical mindset with high attention to detail. * Effective communication, collaboration skills, and strong sense of ownership. That can be a plus: * Experience participating in bug bounty programs. * Experience with automation of security testing using scripting languages such as Python, Go, or Bash. * Experience with container security testing. * Experience in red teaming exercises. * Experience performing infrastructure penetration testing in Linux environments. * Experience with security research and vulnerability disclosure. * Contributions to security tools, blogs, or research publications. * Relevant certifications (optional but beneficial): OSCP, OSWE, eWPT / eWPTX, PNPT, CREST, CEH, GWAPT. CONDITIONS We know that great talent deserves great conditions, so here's what you can expect when joining us: * EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family. * Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free. * Transparent performance reviews twice a year, with bonus opportunities and salary adjustments. * Private medical insurance for you and your family, a corporate mobile plan (unlimited in Cyprus with roaming included), and interest-free support for car purchases. * Mindfulness & well-being support, including psychological assistance with 50% coverage. * 50% coverage of school and kindergarten fees for your children. * Fully covered sports benefits, and also access to in-house electric scooters and bike rentals, and cycling purchase compensation. * Investment in your growth: paid language courses and access to suited-for-you development programs, including conferences, training programs, and coaching to support your professional journey. * A culture of recognition: a peer reward program to celebrate your contributions. * A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration. * Free catering in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks. * A strong engineering culture: international teams, corporate events, team buildings, and hackathons—because great work happens in great communities. RECRUITMENT PROCESS * HR interview (40 min); * Technical interview (1.5 hour); * Final interview (45 min). * Point of contact: Daria Goriacheva * vacancy_type: Security and DevSecOps * Experience shown on site: 3+ years of experience

## Responsibilities

The Security Engineer will be responsible for conducting penetration testing across web applications, APIs, and infrastructure to find security vulnerabilities, and performing manual security assessments and advanced exploitation.

## Requirements

Candidates must have experience in web application penetration testing, a strong understanding of API and network security, and familiarity with common pentesting tools and web vulnerabilities.

## FAQ

- **Is this Security Engineer (Pentester) role still open?** It was posted on 2026-03-18. Listings more than 30 days old may no longer be active, so check Mayflower's site before applying.
- **Where is this role located?** The listing gives the location as Limassol, CY, Cyprus.
- **What skills does this role ask for?** The listing names: Penetration Testing, Web Application Security, API Security Testing, Infrastructure Security, Vulnerability Analysis, Linux, Web Infrastructure, Burp, Nmap, Metasploit, Sqlmap, Ffuf, Authentication, OWASP, PTES, Report Writing.

## More like this

- [All jobs at Mayflower](https://jobs.trythestack.co/companies/mayflower.md)
- [Security Engineer Visa Sponsorship Jobs in Europe](https://jobs.trythestack.co/visa-sponsorship-jobs/role/security-engineer)
- [All visa sponsorship jobs in Cyprus](https://jobs.trythestack.co/visa-sponsorship-jobs/cyprus)
- [Security Engineer at OLIX](https://jobs.trythestack.co/jobs/security-engineer-olix.md)
- [Staff / Senior Staff Security Engineer, Vinted Pay at Vinted](https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-vinted-pay-vinted.md)
- [Lead Security Engineer at Catawiki](https://jobs.trythestack.co/jobs/lead-security-engineer-catawiki.md)
- [Senior Security Engineer, Threat Response at Asana](https://jobs.trythestack.co/jobs/senior-security-engineer-threat-response-asana.md)
- [Security Engineer at Quanza](https://jobs.trythestack.co/jobs/security-engineer-quanza.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://mayflower.recruitee.com/o/security-engineer). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "security-engineer-pentester-mayflower": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Security Engineer (Pentester) at Mayflower, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/security-engineer-pentester-mayflower)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md