Security Testing Engineer - Penetration Tester

About the role

The Security Testing teams partner with Atlassian's internal teams globally to deliver security testing that protects Atlassian's products, platforms and customers. This role provides technical assurance through high-quality manual penetration testing and code review, working closely with security and engineering teams to validate the state of security controls.

Required profile

• 5+ years in a whitebox penetration testing, appsec or manual code review role
• Experience leading projects from start to finish and mentoring other security practitioners
• Ability to collaborate with deeply technical development and infrastructure teams
• Ability to reason about security decisions

Required skills

• Strong understanding of web application security
• Experience in cloud security architecture and infrastructure
• Coding in Java, Python or Go, and at least one scripting language
• Enjoyment of vulnerability hunting beyond what automated tools can find

Nice to have: bug bounty reports submitted to third parties, published security contributions, certifications such as OSCP, OSCE, OSWE, CREST CRT or GPEN, CVEs, presentation experience at industry events, developed security tools, and experience with compliance, privacy, IT or networking functions. Atlassian is a distributed-first company; interviews and onboarding are virtual, and employees can choose to work from an office, from home or a mix.