Penetration Tester

• Perform Web Application and API penetration testing based on OWASP Top 10 and industry best practices.
• Analyze and validate True/False Positive results from SAST, DAST, and SCA security tools.
• Develop Proof‐of‐Concept (PoC) exploits for identified vulnerabilities, including CVE-level issues.
• Conduct Mobile Application Security Testing for Android and iOS platforms.
• Perform manual penetration testing on web-based enterprise systems and prepare detailed security reports.
• Provide guidance on Secure Coding Practices to development teams.
• Research new vulnerabilities (including potential 0‐days) and support CVE registration when applicable.
• Collaborate closely with Backend, DevOps, Cloud, and QA teams to ensure remediation and secure system architectures.
• Utilize scripting skills (Python, Go, Bash, etc.) to automate testing tasks and improve security workflows.
• Participate in security architecture reviews and risk assessments.
• Perform penetration testing and security assessments on Cloud Services (AWS, GCP).

[Required]

• Bachelor’s degree in Computer Science, Information Security, Software Engineering, or related field.
• Hands-on experience in Application Security or Penetration Testing.
• Strong understanding of OWASP Top 10 and secure application development principles.
• Experience working with SAST, DAST, and SCA tools and validating their findings.
• Ability to develop PoCs and exploit known vulnerabilities (CVE-level experience preferred).
• Basic knowledge of security technologies such as Firewall, VPN, IPS/IDS, EDR.
• Understanding of IT infrastructure fundamentals (Network, WAS, DB, OS, etc.).
• Proficiency in scripting languages such as Python, Go, or Bash.
• Experience with Mobile Application penetration testing (Android/iOS).
• Certifications such as OSCP, CEH (strongly preferred).
• Solid analytical, documentation, and communication skills.
• English communication skills sufficient for team collaboration.

[Preferred]

• Award history or strong performance in major CTF competitions.
• Experience discovering and registering 0‐day vulnerabilities (CVE assignment).
• Hands-on experience with Cloud environments such as AWS or GCP.
• Familiarity with DevSecOps, CI/CD security, or security automation.
• Experience with threat modeling or security design review.

• Attractive salary and bonus will be discussed after going through CV & Interview.
• Topik allowance.
• Review capacity annually and adjust salary increases according to work performance.
• Health care: Premium health insurance, Annual health check-up.
• Young working environment.
• Good career development opportunities with interesting and challenging projects.
• English, Korean, technical, soft skills training courses.
• Opportunity to learn special courses from LG CNS, new technology and security.
• Gifts on holidays (April 30th - May 1st, September 2nd, Tet, etc.).
• Outdoor activities with company support: sports clubs, team building, happy hour parties, birthdays, travel, employee and family events, etc.