Polygon is hiring a

Lead Application/Web Penetration Tester

Polygon is the leading platform for Ethereum scaling and infrastructure development. Its growing suite of products offers developers easy access to all major scaling and infrastructure solutions: L2 solutions (ZK Rollups and Optimistic Rollups), sidechains, hybrid solutions, stand-alone and enterprise chains, data availability solutions, and more. Polygon’s scaling solutions have seen widespread adoption with 20,000+ applications hosted, 1B+ total transactions processed, :140M+ unique user addresses, and $5B+ in assets secured.

Polygon's Security Team's Vision is: to become the most trusted organisation in web3 & blockchain

Polygon is looking for a Lead Application Penetration Tester with verifiable experience in leading and preforming Application Penetration Testing for Polygon's Web Products.

In this role you will be responsible for Penetration Testing, Manual Code Review and mentoring junior team members. You will test and validate the state of Polygon's technical security controls, working closely with both our development and engineering teams. You will also be preforming and driving the adoption of SAST & DAST tools.

Polygon's Web2 Tech Stack is composed of: JavaScript, TypeScript, Go, Vue and frameworks like React.

Requierments

• Minimum of 4 years of experience in performing application penetration testing on web applications and APIs
• Strong experience in App Pentest tools such as Burp Suite and Web Inspect
• Certified in any: CISSP, GWAPT, OSCP, OSCE, OSWE, CREST CRT, GPEN
• Understanding of OWASP testing guides and MITRE ATT&CK.
• Experience developing custom scripts or programs (e.g. vulnerability identification) as well as application development is a plus. 

Work from anywhere (Remote first)

Flexible working hours

Flexible vacation policy

Competitive Salary

Website | Twitter |  Ecosystem Twitter | Developer Twitter | Studios Twitter | Telegram | Reddit | Discord | Instagram | Facebook | LinkedIn