Penetration Tester (Web & API)

About the role

Mayflower is building a high‑load partner advertising platform and needs a skilled Penetration Tester to secure its web applications, APIs and underlying infrastructure. You will work closely with engineering and DevOps teams to identify vulnerabilities and drive remediation.

Key responsibilities

• Conduct manual penetration testing of web applications, APIs and infrastructure.
• Exploit discovered vulnerabilities and provide detailed remediation guidance.
• Collaborate with development and operations teams to improve security posture.
• Produce clear, technical penetration testing reports.
• Stay up‑to‑date with emerging attack techniques and security trends.
• Help evolve internal testing methodologies and tooling.

Required profile

• Proven experience in web application penetration testing.
• Strong knowledge of API and network security testing.
• Solid understanding of Linux environments and web infrastructure.
• Familiarity with OWASP, PTES and other security testing frameworks.
• Professional proficiency in English and strong analytical attention to detail.

Required skills

• Burp Suite
• Nmap
• Metasploit
• sqlmap
• ffuf
• Python (or Go/Bash for automation)
• Linux command line
• Authentication, session management and common web vulnerabilities

What we offer

• EU‑based employment contract with a 3‑year Cyprus work visa and full relocation support for you and your family.
• Comprehensive private medical insurance and corporate mobile plan.
• Transparent performance reviews twice a year with bonus and salary adjustment opportunities.
• Opportunity to work on a high‑traffic, cutting‑edge advertising platform in a fast‑growing tech company.