Offensive Security Engineer / Penetration Tester

Genesis is a global ecosystem of product IT companies, recognized as a top employer and known for building innovative products with over a billion downloads. We are looking for an Offensive Security Engineer to join our specialized team, where you will take ownership of end-to-end penetration testing engagements, from scoping and execution to reporting and client communication.

Key responsibilities

• Deliver end-to-end penetration tests of Web and Mobile applications, Active Directory, and cloud environments.
• Validate findings from security services, eliminate false positives, and confirm real business impact.
• Write professional, client-facing technical reports and communicate findings directly to stakeholders.
• Develop automation and internal tooling, including AI-agent-based workflows, to streamline testing phases.
• Create and maintain internal methodologies, testing checklists, and a comprehensive knowledge base.

Requirements

• 2.5+ years of hands-on commercial penetration testing experience with a relevant certification like OSCP, CPTS, or GPEN.
• Strong expertise in Web application testing (OWASP) and Mobile application testing (OWASP MASTG).
• Working knowledge of Active Directory, internal network attacks, and privilege escalation paths.
• Proficiency in Python or Bash scripting and the ability to read application source code to identify vulnerabilities.
• Professional proficiency in English and Ukrainian to conduct client calls and write detailed technical reports.

What we offer

• Flexible working hours and the ability to work from anywhere.
• Comprehensive medical insurance and unlimited sick leave.
• Provision of all necessary equipment for your professional work.
• Support for professional development through training compensation and internal learning platforms.
• Corporate support programs for employees and their families.