{"id":4262596,"url":"https://alion.io/job/interactivity-web-application-penetration-tester","title":"Web Application Penetration Tester","company":{"id":4541771,"name":"Interactivity","domain":"interactivity.com.ua","url":"https://alion.io/company/interactivity-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"Claude","optional":false},{"name":"DNS","optional":false},{"name":"Drupal","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PHP","optional":false},{"name":"Symfony","optional":false},{"name":"WordPress","optional":false},{"name":"Bash","optional":true},{"name":"Linux","optional":true},{"name":"PCI DSS","optional":true},{"name":"Python","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-13T15:38:23Z","employer_posted_date":null,"last_verified_at":"2026-11-13T15:38:23Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Web Application Penetration Tester (Full-Time or Contract)\n\nInteractivity builds, hosts and maintains websites and apps for international clients.\nWe are looking for an experienced Web Application Penetration Tester to help identify security vulnerabilities and improve the security of our clients’ websites, web applications, and APIs.\nYou will work closely with our development and server administration teams to identify security risks, provide clear recommendations, and verify that vulnerabilities have been properly addressed.\nWhat You’ll Do\n\nConduct authorized penetration tests of client websites, web applications, and APIs.\n\nIdentify OWASP Top 10 vulnerabilities, including authentication and session management issues, access control flaws, injection vulnerabilities, and security misconfigurations.\n\nTest CMS platforms and custom applications, including WordPress, Drupal, Joomla, and Symfony.\n\nReview server configurations, TLS, DNS, and email authentication.\n\nPrepare clear security reports with severity ratings, reproduction steps, and actionable remediation recommendations for both technical teams and non-technical clients.\n\nPerform follow-up testing to verify that identified vulnerabilities have been resolved.\n\nCollaborate with developers and server administrators on security improvements.\n\nAgree on testing scope, rules of engagement, and schedules before each assessment.\nWhat We’re Looking For\n\n3+ years of hands-on experience in web application penetration testing.\n\nStrong manual penetration testing skills, including experience with Burp Suite and the ability to identify vulnerabilities that automated scanners may miss.\n\nAbility to use modern AI-powered security testing tools and approaches such as DAST, XBOW, Aikido, and Claude Fable.\n\nWorking knowledge of the OWASP Web Security Testing Guide and PHP-based technology stacks.\n\nStrong written communication skills, with the ability to explain technical findings clearly.\n\nExperience working under written authorization and NDAs, with careful handling of confidential client data.\nNice to Have\n\nRelevant certifications, such as CREST, OSCP, GWAPT, OSWE or Burp Suite Certified Practitioner.\n\nScripting skills in Python or Bash.\n\nExperience with Linux server hardening.\n\nFamiliarity with PCI DSS or SOC 2 testing requirements.\n\nWhy Interactivity?\n\nEstablished in 2003, we offer competitive salaries based on experience and productivity; a positive and inclusive work environment;\n\nan opportunity to work with a veteran team on important world-class projects; a benefits package that includes:\n\n✔ Work from anywhere in Ukraine or Europe\n\n✔ Flexible work schedules\n\n✔ VIP health insurance or reimbursement\n\n✔ 20 paid days off\n\n✔ Company-provided laptop and monitor\n\n✔ Free membership at a gym of your choice\n\nHow to Apply?\n\nPlease send your CV.\n\nIf possible, include an anonymized sample penetration testing report from your previous work, ensuring that no confidential client information is disclosed.","description_format":"text","description_chars":2982,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance"],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing"],"lifecycle":[{"event":"open","at":"2026-11-13T15:42:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["seen:0","win:early"],"computed_at":"2026-11-13T21:09:14Z"},"pay":null,"html_url":"https://alion.io/job/interactivity-web-application-penetration-tester","json_url":"https://alion.io/job/interactivity-web-application-penetration-tester.json","meta":{"generated_at":"2026-11-13T21:09:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":42178,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4541771},"rest":"https://alion.io/mcp/rest/get_company?id=4541771"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finteractivity-web-application-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finteractivity-web-application-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finteractivity-web-application-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/interactivity-web-application-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finteractivity-web-application-penetration-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4262596}},{"tool":"search_jobs","arguments":{"company":"interactivity.com.ua","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4262596},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}