Junior Offensive Security Engineer
Pubblicato il 27-09-2026 - Satispay in Italia
Junior Offensive Security Engineer
About Satispay
Satispay began by rethinking the simple act of a payment to remove the friction from our daily routines. But we didn’t stop there. Today, we are building a complete financial platform designed to empower people and concretely improve their lives. By giving our 6 million users a clear, open path to pay, save, and invest, we are evolving into the definitive destination for every financial need.
As our Junior Offensive Security Engineer, you’ll be the person who supports our security team in securing our cloud infrastructure, mobile, and web applications. Penetration Testing – Perform penetration testing on mobile (iOS & Android) and web applications. Under the guidance of a senior engineer, use tools like Frida to bypass security controls and analyze app behavior at runtime.
Code and Architectural Review – Review source code for logic flaws, collaborate with developers to implement secure design patterns, and assist in reviewing cloud infrastructure for full security coverage.
Scripting & Automation – Develop scripts to automate repetitive testing tasks, create proof-of-concept exploits, and parse tool results to optimize testing workflows.
Collaborate on Defense – Work closely with the rest of the Security team to test monitoring capabilities, participate in attack simulations, and improve overall detection strategies.
Documentation and Reporting – Write technical reports of findings and document remediation steps for development teams.
Strong Foundations – Good knowledge of information security basics, networking, web application architecture, and familiarity with common web vulnerabilities (e.g., SQL injection, XSS, IDOR, race conditions).
Hands‑on Experience – 0–2 years of experience from internships, university projects, active CTF participation, bug bounties, or personal research.
Curious Mindset – Driven to figure out how business logic can be bypassed and understand the "why" behind each vulnerability.
Scriptin