Description
Growe welcomes those who are excited to:
-
Triage, validate, and prioritize security findings from SAST, SCA, and Secret scanning tools, filter out false positives, assess risks, and track issues through to remediation;
-
Conduct manual and tool-assisted code reviews to identify security vulnerabilities, logic flaws, and insecure implementation choices before code reaches production;
-
Perform hands-on penetration testing of web applications, microservices, and APIs to uncover security vulnerabilities and business logic flaws;
-
Audit REST and GraphQL APIs and web applications with a strong focus on core application security risks, authentication, authorization, and business logic.
We need your professional experience:
-
2-4 years of experience in Application Security, Product Security, or Penetration Testing;
-
Hands-on experience triaging and analyzing findings from Semgrep / OpenGrep, Gitleaks, Trivy, and OSV-Scanner;
-
Experience with Burp Suite (Pro), Nuclei, Subfinder, SQLmap, Metasploit, and NetExec;
-
Deep understanding of classic OWASP Top 10 vulnerabilities, including Injection flaws (SQLi, Command Injection), Server-Side Request Forgery (SSRF), Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Broken Access Control / Insecure Direct Object References (IDOR / BOLA), Security Misconfigurations, Cryptographic Failures, Insecure Deserialization, and Mass Assignment;
-
Solid knowledge of OWASP API Security Top 10 for REST and GraphQL architectures;
-
Deep understanding of identity protocols and access control mechanics (OAuth 2.0, OIDC, JWT, SAML, RBAC/ABAC);
-
Ability to identify complex authorization bypasses, session management flaws, and business logic bugs;
-
Ability to read and analyze modern application code to spot security flaws (will be a plus);
-
Understanding of cloud security principles in AWS environments and Kubernetes (K8s) security fundamentals (will be a plus);
-
Intermediate level of English (spoken and written).
We appreciate if you have those personal features:
-
Strong communication skills to effectively collaborate with engineering, product, and DevOps teams;
-
Result-oriented mindset;
-
Openness to learning.
We are seeking those who align with our core values:
-
GROWE TOGETHER: Our team is our main asset. We work together and support each other to achieve our common goals;
-
DRIVE RESULT OVER PROCESS: We set ambitious, clear, measurable goals in line with our strategy and driving Growe to success;
-
BE READY FOR CHANGE: We see challenges as opportunities to grow and evolve. We adapt today to win tomorrow.
Similar jobs
Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…
Growe welcomes those who are excited to: Design and establish a standardized access audit framework, including methodology, cadence, evidence collection, and reporting templates; Define risk-based audit scope and samplin…
Est. 80,000 EUR
Growe welcomes those who are excited to: Design, build, and maintain backend services using .NET (C#); Develop and evolve microservices in a production environment; Support existing functionality and ensure backward comp…
Est. 60,000 EUR
Growe welcomes those who are excited to: Test existing functionality and new features; Write and maintain test documentation; Ensure the quality and functionality of the product through manual testing; Identify, document…
Growe welcomes those who are excited to: Analyze and tune system designs to identify and fix performance bottlenecks; Analyze tasks, decompose them into sub-tasks, and estimate the development time; Perform code & de…
Growe welcomes those who are excited to: Process alerts in a timely and effective manner (triggered for sports players); Segment users according to procedures; Process internal and external team requests; Respond to requ…
Est. 60,000 EUR
Growe welcomes those who are excited to: Deliver backend development initiatives; Write clean, readable, maintainable, and well-structured code; Coordinate cross-team interactions and dependencies within assigned initiat…
Growe welcomes those who are excited to: Provide L1–L2 technical support for end users in a corporate environment; Maintain and monitor office IT infrastructure, including computers, laptops, and peripheral devices; Inst…
Growe welcomes those who are excited to: Partner with business stakeholders to translate business needs into clear analytical questions, metrics, and data-driven solutions; Conduct end-to-end analysis of revenue performa…
Est. 222,500 USD
About Glean: Glean is the Work AI platform that helps everyone work smarter with AI. What began as the industry’s most advanced enterprise search has evolved into a full-scale Work AI ecosystem, powering intelligent Sear…
Est. 120,000 EUR
We are looking for a DevSecOps and Application Security Lead to join our team and build our application security from scratch. In this role, you will lead the security direction within our department, focusing on integra…
Est. 55,000 EUR
Growe welcomes those who are excited to: Conduct ad hoc and ongoing KYB checks and monitoring of contractual companies and accompany the due diligence process of signing contracts; Work collaboratively with other members…
Est. 80,000 EUR
Growe welcomes those who are excited to: Shape the strategy and roadmap of a core platform powering multiple products and international markets; Discover product opportunities proactively, turning insights into impactful…
Est. 124,000 USD
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security po…
Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the wo…
Est. 152,500 USD
At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…
Atomicwork is on a mission to transform the digital workplace experience by uniting people, processes, and platforms through AI automation. Our team is building a modern service management platform that enables growing b…
Est. 222,500 USD
About Glean: Glean is the Work AI platform that helps everyone work smarter with AI. What began as the industry’s most advanced enterprise search has evolved into a full-scale Work AI ecosystem, powering intelligent Sear…
Est. 80,000 EUR
Growe welcomes those who are excited to: Design, develop, and maintain scalable and reliable data pipelines using Airflow; Design and optimize Athena tables and queries, ensuring efficient performance and cost-effectiven…
Est. 90,000 GBP
Looking for an innovative, high-growth, multi-award-winning company in one of the hottest segments of the security market? Look no further than Veracode! Veracode is a global leader in Application Risk Management for the…
Est. 124,000 USD
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security po…
Est. 90,000 EUR
About Staffbase We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry…
Growe welcomes those who are excited to: Monitor that payment methods work properly, escalate issues to respective providers and teams; Analyze acceptance rates of different payment methods/providers/cashiers and make de…
Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe help…
About DevRev At DevRev, we're building the future of work with Computer – your AI teammate. Unlike traditional tools, Computer unifies all your data sources, tools, and workflows into a single AI-ready platform, giving e…
About Glean: Glean is the Work AI platform that helps everyone work smarter with AI. What began as the industry’s most advanced enterprise search has evolved into a full-scale Work AI ecosystem, powering intelligent Sear…
Est. 209,000 USD
We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hacke…
Est. 80,000 EUR
Welcome to DKB Code Factory…. { { … a_place_to_stay_yourself: } } ; { { … a_place_to_stay_curious: Use AI driven offensive security techniques to proactively identify, validate, and communicate exploitable vulnerabilitie…
Est. 90,000 EUR
About Staffbase We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry…
Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, natura…