Penetration Tester (Web & API)

Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement.

We are developing a partner advertising high-load system with a large RPS, convenient and modern interface. We are growing exponentially and successfully implementing new technologies to accelerate this growth and the system as a whole.

Now we look for a Security Engineer to join our team

Job Responsibilities

• Conduct penetration testing of web applications, APIs, and infrastructure to identify security vulnerabilities.
• Perform manual security assessments and advanced exploitation of discovered vulnerabilities.
• Collaborate with engineering and DevOps teams to improve security of applications and infrastructure.
• Prepare detailed penetration testing reports with clear technical descriptions and remediation recommendations.
• Continuously research new attack techniques, vulnerabilities, and security trends.
• Assist in developing and improving internal security testing methodologies and tools.
• Support the implementation of secure development practices within the organization.

You’ll thrive here if you have

• Experience in web application penetration testing.
• Good knowledge of API and network security testing.
• Strong understanding of Linux and web infrastructure.
• Experience with common pentesting tools (Burp, Nmap, Metasploit, sqlmap, ffuf, etc.).
• Understanding of authentication, sessions, and common web vulnerabilities.
• Experience with manual security testing and vulnerability analysis.
• Familiarity with OWASP / PTES / security testing methodologies.
• Ability to write clear vulnerability reports.
• Professional English proficiency.
• Strong analytical mindset with high attention to detail.
• Effective communication, collaboration skills, and strong sense of ownership.

That can be a plus:

• Experience participating in bug bounty programs.
• Experience with automation of security testing using scripting languages such as Python, Go, or Bash.
• Experience with container security testing.
• Experience in red teaming exercises.
• Experience performing infrastructure penetration testing in Linux environments.
• Experience with security research and vulnerability disclosure.
• Contributions to security tools, blogs, or research publications.
• Relevant certifications (optional but beneficial): OSCP, OSWE, eWPT / eWPTX, PNPT, CREST, CEH, GWAPT.

Conditions

We know that great talent deserves great conditions, so here's what you can expect when joining us:

• EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family.
• Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free.
• Transparent performance reviews twice a year, with bonus opportunities and salary adjustments.
• Private medical insurance for you and your family, a corporate mobile plan (unlimited in Cyprus with roaming included), and interest-free support for car purchases.
• Mindfulness & well-being support, including psychological assistance with 50% coverage.
• 50% coverage of school and kindergarten fees for your children.
• Fully covered sports benefits, and also access to in-house electric scooters and bike rentals, and cycling purchase compensation.
• Investment in your growth: paid language courses and access to suited-for-you development programs, including conferences, training programs, and coaching to support your professional journey.
• A culture of recognition: a peer reward program to celebrate your contributions.
• A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration.
• Free catering in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks.
• A strong engineering culture: international teams, corporate events, team buildings, and hackathons—because great work happens in great communities.

Recruitment process

• HR interview (40 min);
• Technical interview (1.5 hour);
• Final interview (45 min).