Vacancy

About you

First and foremost, you're a hacker. You love playing with systems, and breaking them.

You've found your niche in web security: understanding the wealth of vulnerabilities that are out there, how to find them, and how to exploit them.

As a seasoned penetration tester, you've encountered pretty much every kind of web security bug there is. You enjoy telling war stories about the crazy bugs that you've found.

You thrive on sharing your knowledge and helping others to learn. You relish the idea of reaching a global audience and teaching them how to hack the web.

Any of the following get you excited:

• Quirky variations on common vulnerabilities that make them harder to find or exploit.
• Chaining together low-risk vulnerabilities to enable a more serious attack.
• Devising ways to automate tasks that are normally done manually.
• Finding loopholes in input validation or other defenses that most testers give up on.
• Using out-of-band techniques to detect invisible vulnerabilities.
• Spotting overlooked wrinkles in well-worn topics that uncover new possibilities for exploitation.
• Devising and participating in CTF competitions.
• Sharing your expertise with others, through training courses, blog posts, or other output.

Essential skills

• Web security expert, with deep and broad knowledge of vulnerabilities and how to find and exploit them.
• Five plus years of experience of penetration testing web applications.
• Power user of Burp Suite Professional and passionate about the product.
• Strong communicator, able to explain complex technical details to a less specialist audience.
• Effective team player with high EQ and low ego.
• Helpful, can-do attitude, generous in sharing time and knowledge with others.
• Good time management: able to manage own agenda, multi-task, and work to deadlines.
• A track record of published research on web security would be beneficial but is not critical.

Why join PortSwigger?

• We like to have fun (why else would we make a product called Burp?).

• We are professional without being corporate.

• We encourage a positive work-life balance. We work hard but keep to a normal working day. We don't do stress.

• We offer a healthy, high-tech working environment. All our people work on the latest Macs, with dual monitors, sitting-standing desks, and (if they are so inclined) walking treadmills.

• We are a close-knit team. We have regular team lunches, evening social events, and amazing parties twice a year.