Penetration Tester (Web & API)

Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement.

We are developing a partner advertising high-load system with a large RPS, convenient and modern interface. We are growing exponentially and successfully implementing new technologies to accelerate this growth and the system as a whole.

Now we look for a Security Engineer to join our team

Job Responsibilities

• Conduct penetration testing of web applications, APIs, and infrastructure to identify security vulnerabilities.

• Perform manual security assessments and advanced exploitation of discovered vulnerabilities.

• Collaborate with engineering and DevOps teams to improve security of applications and infrastructure.

• Prepare detailed penetration testing reports with clear technical descriptions and remediation recommendations.

• Continuously research new attack techniques, vulnerabilities, and security trends.

• Assist in developing and improving internal security testing methodologies and tools.

• Support the implementation of secure development practices within the organization.

Requirements

You’ll thrive here if you have

• Experience in web application penetration testing.

• Good knowledge of API and network security testing.

• Strong understanding of Linux and web infrastructure.

• Experience with common pentesting tools (Burp, Nmap, Metasploit, sqlmap, ffuf, etc.).

• Understanding of authentication, sessions, and common web vulnerabilities.

• Experience with manual security testing and vulnerability analysis.

• Familiarity with OWASP / PTES / security testing methodologies.

• Ability to write clear vulnerability reports.

• Professional English proficiency.

• Strong analytical mindset with high attention to detail.

• Effective communication, collaboration skills, and strong sense of ownership.

That can be a plus:

• Experience participating in bug bounty programs.

• Experience with automation of security testing using scripting languages such as Python, Go, or Bash.

• Experience with container security testing.

• Experience in red teaming exercises.

• Experience performing infrastructure penetration testing in Linux environments.

• Experience with security research and vulnerability disclosure.

• Contributions to security tools, blogs, or research publications.

• Relevant certifications (optional but beneficial): OSCP, OSWE, eWPT / eWPTX, PNPT, CREST, CEH, GWAPT.

Conditions

We know that great talent deserves great conditions, so here's what you can expect when joining us:

• EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family.

• Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free.

• Transparent performance reviews twice a year, with bonus opportunities and salary adjustments.

• Private medical insurance for you and your family, a corporate mobile plan (unlimited in Cyprus with roaming included), and interest-free support for car purchases.

• Mindfulness & well-being support, including psychological assistance with 50% coverage.

• 50% coverage of school and kindergarten fees for your children.

• Fully covered sports benefits, and also access to in-house electric scooters and bike rentals, and cycling purchase compensation.

• Investment in your growth: paid language courses and access to suited-for-you development programs, including conferences, training programs, and coaching to support your professional journey.

• A culture of recognition: a peer reward program to celebrate your contributions.

• A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration.

• Free catering in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks.

• A strong engineering culture: international teams, corporate events, team buildings, and hackathons—because great work happens in great communities.

Recruitment process

• HR interview (40 min);

• Technical interview (1.5 hour);

• Final interview (45 min).