{"id":2218659,"url":"https://alion.io/job/itartis-web-pentester","title":"Web Pentester","company":{"id":4380848,"name":"IT Artis","domain":"it-artis.ru","url":"https://alion.io/company/itartis","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saint Petersburg, Russia"],"countries":["RU"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":250000,"currency":"RUB","period":"month","gross":null,"usd_annual":33996},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"Linux","optional":false},{"name":"MS SQL","optional":false},{"name":"MySQL","optional":false},{"name":"PoC Library","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Red Teaming","optional":false},{"name":"SQL","optional":false},{"name":"SQLmap","optional":false},{"name":"GitHub","optional":true},{"name":"Telegram","optional":true}],"status":"live","first_seen_at":"2026-10-10T10:42:27Z","employer_posted_date":null,"last_verified_at":"2026-10-10T10:42:27Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Навыки: SQL, PostgreSQL, MySQL, Burp Suite. Специализации: Пентестер.\nМы - команда специалистов по наступательной безопасности. Проводим пентесты веб-приложений, внутренних инфраструктур и Red Team операции для компаний финансового сектора, e-commerce и телекома. Ищем человека, которому интересно копаться в логике приложений, находить нестандартные векторы атак и делать это руками, а не только инструментами.\nЧем предстоит заниматься\nРучное тестирование веб-приложений на наличие уязвимостей (Black box, Grey box)\n\nПоиск и эксплуатация SQLi, LFI/RFI, SSRF, SSTI, Command Injection и других классических веб-уязвимостей\n\nРабота с Burp Suite: перехват и модификация запросов, Intruder, Repeater, расширения\n\nОбход WAF: ручной тамперинг, подбор и написание tamper-скриптов\n\nРабота с автоматизированными инструментами: sqlmap, ghauri - с пониманием того, что происходит под капотом\n\nНаписание понятных отчётов с PoC, оценкой критичности и рекомендациями по устранению\n\nОбязательно:\nУверенное понимание веб-уязвимостей: SQL Injection (включая blind boolean/time-based), LFI/RFI, SSRF, SSTI, CMDi - как возникают и как ищутся на практике\n\nЗнание специфики основных СУБД: MySQL, PostgreSQL, MSSQL\n\nОпыт работы с Burp Suite (Intercept, Repeater, Intruder, расширения)\n\nБазовые навыки Linux: навигация, права, процессы, сеть\n\nПонимание принципов работы sqlmap и ghauri\n\nБазовый опыт с шеллами и реверс-шеллами\n\nБудет плюсом:\nПрохождение PortSwigger Web Security Academy\n\nАктивность на HackTheBox / TryHackMe\n\nОпыт написания tamper-скриптов или расширений для Burp\n\nПонимание работы WAF и механизмов их обхода\n\nЧто мы предлагаем:\nОфис рядом с м. Новочеркасская\n\nОбеды за счёт компании\n\nЗарплата без потолка - обсуждаем под ваш реальный уровень\n\nМолодой и дружный коллектив\n\nРабота с реальными коммерческими проектами\n\nКак откликнуться\nНапишите в Telegram: @danilov_danil03\nРасскажите коротко о себе: над чем работали, что проходили. Приложите GitHub, writeup'ы, статьи или разборы ВПО - всё это будет плюсом.","description_format":"text","description_chars":2001,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Russian","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-10T10:42:27Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":20,"reasons":["seen:1","win:early"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":33996,"is_top_pay":false},"html_url":"https://alion.io/job/itartis-web-pentester","json_url":"https://alion.io/job/itartis-web-pentester.json","meta":{"generated_at":"2026-10-12T13:30:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21199,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4380848},"rest":"https://alion.io/mcp/rest/get_company?id=4380848"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fitartis-web-pentester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fitartis-web-pentester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fitartis-web-pentester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/itartis-web-pentester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fitartis-web-pentester"}]}