{"id":3865073,"url":"https://alion.io/job/aston-penetration-tester-2","title":"Penetration Tester","company":{"id":1467,"name":"Aston","domain":"astondevs.ru","url":"https://alion.io/company/aston","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"A","score":86,"open_postings":12,"ghost_share":0.167,"stale_share":0,"repost_share":0.583,"time_to_fill_p50_days":17,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saint Petersburg, Russia"],"countries":["RU"],"hiring_countries":["RU","BY","KZ","KG","AM"],"hiring_countries_total":5,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Acunetix","optional":false},{"name":"Binary Ninja","optional":false},{"name":"Burp Suite","optional":false},{"name":"Ghidra","optional":false},{"name":"IDA Pro","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Mend","optional":false},{"name":"Metasploit","optional":false},{"name":"OWASP Dependency-Check","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Snyk","optional":false},{"name":"STRIDE","optional":false},{"name":"Tcpdump","optional":false},{"name":"Threat Modeling","optional":false},{"name":"WinDbg","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false},{"name":"Active Directory","optional":true},{"name":"Assembly","optional":true},{"name":"Bash","optional":true},{"name":"Docker","optional":true},{"name":"Kubernetes","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-11-06T11:37:54Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T23:57:42Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Aston - аккредитованная аутсорсинговая IT-компания, работающая с 2007 года. Наш штат насчитывает 2500+ специалистов. Мы разрабатываем программное обеспечение и IT-решения в сферах Finance, Healthcare, eCommerce, IoT, Media, Big Data, ML и многом другом.\n Предлагаем присоединиться в роли Penetration Tester!\n Почему это будет интересно?\n возможность прокачать экспертизу в быстроразвивающейся и насыщенной области;\n возможность быть частью изменений, улучшений, запусков новых направлений.\n Чего мы ждем от специалиста?\n опыт работы в роли Penetration Tester от 4-х лет;\n знание основных типов уязвимостей и методов их эксплуатации;\n знание классификации уязвимостей по NIST, БДУ;\n глубокое понимание OWASP Top 10 (Web, API, Mobile, LLM и др.);\n умение выстроить процесс тестирования по фазам (PTES);\n опыт penetration testing web-приложений и API (Burp Suite Professional, ZAP);\n опыт статического и динамического анализа Android-приложений (APKTool, Jadx, Android Studio)4\n опыт получения root/jailbreak на мобильных устройствах;\n опыт работы с системами анализа сетевого трафика (Wireshark, tcpdump);\n опыт работы с Metasploit Framework;\n опыт работы со сканерами уязвимостей (Acunetix, MaxPatrol, Security Vision, и тд)\n опыт работы в реверс-инжиниринг (IDA Pro / Ghidra / Binary Ninja);\n опыт работы с Binary exploitation: (buffer overflow, ROP, use-after-free, heap exploitation);\n опыт анализа драйверов (Windows Kernel debugging - WinDbg, Linux kernel);\n опыт анализа firmware (Binwalk, Firmadyne, Ghidra, анализ вложенных файловых систем);\n знания в криптографии (алгоритмы, common mistakes, side-channel attacks);\n опыт анализа сторонних библиотек (Dependency-Check, Snyk, Mend, Black Duck);\n понимание Threat Modeling (STRIDE, PASTA);\n умение объяснять сложные технические вещи разработчикам и руководителям;\n опыт подготовки информативных отчетов для технической и executive-аудитории;\n знание английского языка на уровне Upper-Intermediate и выше (чтение документации, CVE, отчётов).\n Будет плюсом:\n знание Kubernetes security, Docker security, cloud security (Yandex/VK/Mail);\n опыт эксплуатации и защиты Active Directory, Windows/Linux hardening;\n опыт работы с Python/Bash, PowerShell;\n опыт разработки эксплойтов;\n знание современных C2-фреймворков и Red-team техник;\n опыт участия в CTF/Red Team;\n опыт участия в программах поиска уязвимостей (bug bounty);\n наличие сертификатов: OSCP, OSWE/OSEP/OSED, eJPT/eWPT/CREST, CISSP/CISM.\n Что мы предлагаем?\n Хорошая зарплата: уровень обсуждается индивидуально, есть доплаты за менторство и профактивности.\n\n Развитие: долгосрочные проекты от российских заказчиков, возможность менять направления, прозрачная система Performance Review.\n\n Комфорт и свобода: релокейт между офисами, выбор формата работы (удалённо, офис, гибрид), адаптация для новых сотрудников.\n\n Обучение: доступ к корпоративному порталу, митапам, конференциям (и как гость, и как спикер).\n\n Социальный пакет: ДМС со стоматологией, частичная компенсация спорта, бесплатный английский, оплачиваемый отпуск и больничные.\n\n Корпоративная жизнь: тимбилдинги, детские праздники, внутренние мероприятия.\n\n Наши офисы:\n Москва (ул. Вильгельма Пика, 11, БЦ «Ботаника», 13 эт., оф. 1310),\n\n Санкт-Петербург (Владимирский проспект, д. 23, 8 этаж),\n\n Казань (Н. Ершова, 76/1),\n\n Самара (IT парк Монте Роза).\n\n Откликайтесь, если вы готовы расти и развиваться вместе с командой ASTON! Наш рекрутер свяжется с вами, чтобы обсудить детали.","description_format":"text","description_chars":3454,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Russian","level":"Advanced (C1)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Russia","iso":"RU","kind":"country"},{"name":"Belarus","iso":"BY","kind":"region"},{"name":"Kazakhstan","iso":"KZ","kind":"region"},{"name":"Kyrgyzstan","iso":"KG","kind":"region"},{"name":"Armenia","iso":"AM","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","IT Outsourcing & Dedicated Teams","Custom Software Development","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-11-06T11:41:24Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":17,"reasons":["conf:6","velocity","win:early"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/aston-penetration-tester-2","json_url":"https://alion.io/job/aston-penetration-tester-2.json","meta":{"generated_at":"2026-11-09T14:25:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19694,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1467},"rest":"https://alion.io/mcp/rest/get_company?id=1467"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faston-penetration-tester-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faston-penetration-tester-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faston-penetration-tester-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aston-penetration-tester-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faston-penetration-tester-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3865073}},{"tool":"search_jobs","arguments":{"company":"astondevs.ru","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3865073},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}