Penetration Tester (Web & API)

Job description

Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement. We are developing a partner advertising high-load system with a large RPS, convenient and modern interface. We are growing exponentially and successfully implementing new technologies to accelerate this growth and the system as a whole. Now we look for a Security Engineer to join our team Job Responsibilities Conduct penetration testing of web applications, APIs, and infrastructure to identify security vulnerabilities. Perform manual security assessments and advanced exploitation of discovered vulnerabilities. Collaborate with engineering and DevOps teams to improve security of applications and infrastructure. Prepare detailed penetration testing reports with clear technical descriptions and remediation recommendations. Continuously research new attack techniques, vulnerabilities, and security trends. Assist in developing and improving internal security testing methodologies and tools. Support the implementation of secure development practices within the organization. You’ll thrive here if you have Experience in web application penetration testing. Good knowledge of API and network security testing. Strong understanding of Linux and web infrastructure. Experience with common pentesting tools (Burp, Nmap, Metasploit, sqlmap, ffuf, etc.). Understanding of authentication, sessions, and common web vulnerabilities. Experience with manual security testing and vulnerability analysis. Familiarity with OWASP / PTES / security testing methodologies. Ability to write clear vulnerability reports. Professional English proficiency. Strong analytical mindset with high attention to detail. Effective communication, collaboration skills, and strong sense of ownership. That can be a plus: Experience participating in bug bounty programs. Experience with automation of security testing using scripting languages such as Python, Go, or Bash. Experience with container security testing. Experience in red teaming exercises. Experience performing infrastructure penetration testing in Linux environments. Experience with security research and vulnerability disclosure. Contributions to security tools, blogs, or research publications. Relevant certifications (optional but beneficial): OSCP, OSWE, eWPT / eWPTX, PNPT, CREST, CEH, GWAPT. Conditions We know that great talent deserves great conditions, so here's what you can expect when joining us: EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family. Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free. Transparent performance reviews twice a year, with bonus opportunities and salary adjustments. Private medical insurance for you and your family, a corporate mobile plan (unlimited in Cyprus with roaming included), and interest-free support for car purchases. Mindfulness & well-being support, including psychological assistance with 50% coverage. 50% coverage of school and kindergarten fees for your children. Fully covered sports benefits, and also access to in-house electric scooters and bike rentals, and cycling purchase compensation. Investment in your growth: paid language courses and access to suited-for-you development programs, including conferences, training programs, and coaching to support your professional journey. A culture of recognition: a peer reward program to celebrate your contributions. A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration. Free catering in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks. A strong engineering culture: international teams, corporate events, team buildings, and hackathons—because great work happens in great communities. Recruitment process HR interview (40 min); Technical interview (1.5 hour); Final interview (45 min).