3 days ago
Kaunas, Lithuania or Vilnius, LithuaniaSenior
Responsibilities
- Run penetration tests and targeted attack simulations against web applications, APIs, and Linux-based hosting infrastructure.
- Identify privilege escalation, isolation breakout, account takeover, and other multi-tenant risks.
- Triage, reproduce, prioritize, and coordinate fixes for external vulnerability and bug bounty reports.
- Automate reconnaissance, repetitive offensive security tasks, and regression checks with custom tooling.
- Test new features and AI-powered products for prompt injection, data leakage, and agent abuse before launch.
- Write actionable security reports and share knowledge through walkthroughs, internal CTFs, and code reviews.
- Partner with product and infrastructure engineers to validate fixes and retest vulnerabilities.
Requirements
- Knowledge of penetration testing, application security, or red teaming.
- Demonstrable CTF, HackTheBox, TryHackMe, or bug bounty experience is accepted.
- Understanding of web and API vulnerabilities, including OWASP Top 10 and beyond.
- Linux and networking fundamentals.
- Clear written English and the ability to communicate findings so engineers can fix them.
- An ethical, curious, attacker-oriented mindset.
Benefits
- Flexible work from Hostinger offices in Vilnius, Kaunas, Jakarta, or Luxembourg, from home, or from anywhere in the world.
- Professional development through Reforge, CoachHub, global conferences, libraries, mentoring opportunities, and new projects.
- Time off, a Headspace subscription, wellbeing events, and location-dependent health insurance, gym membership, health checks, and hobby clubs.
- Company events including Summerfest, Winterfest, town halls, team-building activities, workations, and Meet the Client sessions.
About Hostinger
Hostinger provides shared, cloud, and VPS web hosting, domain registration, a website builder, WordPress and eCommerce tooling, and business email for individuals, SMBs, and web professionals. The privately held company, founded in 2004 and headquartered in Vilnius, Lithuania, serves more than 5.5 million clients across 150 countries. Its platform spans 14 data centers across North America, South America, Europe, and Asia and operates on 100% renewable electricity.