Point your AI agent at freehire and let it find you a job. A CLI and an MCP server over the whole job API — no browser.
About the Role As an Application Security Engineer, you play a critical role in safeguarding DKSH's digital landscape by driving application security assurance across the full software development lifecycle. Your…
The Hong Kong Jockey Club Founded in 1884, The Hong Kong Jockey Club (“the Club”) is a world-class racing club that acts continuously for the betterment of our society. The Club has a unique integrated business model,…
Red Team Operator Location: Wrocław / Katowice - 2 days in office / 3 days remote Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY. Today’s…
Senior Penetration Tester / Red Team Consultant – EY GDS Spain - Hybrid The opportunity As a S enior Penetration Tester / Red Team Consultant, you are part of the EY Cyber Security team delivering offensive security…
Job Title: Application Security Expert - Red Team / Ethical Hacker Department: Information Security / Cybersecurity Reports To: Group CISO Job Summary: The Application Security Expert - Red Team / Ethical Hacker is a…
You’ll assess software risks, review code, and partner with engineers to embed security into Affirm’s buy-now-pay-later products using languages like Python and JavaScript.
Conducts hands-on security assessments and penetration tests of web applications, networks, and systems for gaming-industry clients, then writes detailed reports and remediation plans. Based in-person at GLI's Sofia office with up to 50% travel; core toolkit includes Nessus, Metasploit, Burp Suite, Kali, and NMap.
Senior AppSec engineer to drive a Security-by-Design program at a client in Geneva: wiring SAST/DAST/SCA tools into CI/CD pipelines, triaging vulnerabilities by risk, coaching developers, and tracking AppSec KPIs. Key tech: OWASP/ASVS, SonarQube, ZAP/Burp, Snyk, GitLab CI, Java/Spring.
DevSecOps engineer at Binar Academy in South Jakarta (hybrid, 6-month contract) who builds CI/CD pipelines with integrated security checks, automates SAST/DAST/SCA and container scanning, applies AWS/GCP IAM and cloud security best practices, and manages Docker/Kubernetes infrastructure with Terraform.
Senior application security (AppSec) expert placed by MGI Consultants for a long-term engagement at a client in Geneva: embedding AppSec/'security by design' across product teams, integrating SAST/DAST/SCA into CI/CD, triaging vulnerabilities, training developers and AppSec champions, and tracking maturity KPIs. Core stack: OWASP, SonarQube/ZAP/Burp/Snyk, GitLab CI, Java/Spring. CDI, 80–100%.
A senior offensive security operator who runs hands-on red team attacks against LLMs, AI agents, RAG pipelines, and AI supply chains — then encodes that tradecraft into Armadin's autonomous red-team AI agents. Core stack: prompt injection and jailbreak chains, agent/MCP exploitation, Burp Suite, Garak/PyRIT/promptfoo, Python/Bash, and cloud AI platforms.
Middle-level penetration tester at a St. Petersburg information security company, independently running offensive security projects end-to-end: external and internal pentests, Active Directory attacks, privilege escalation, and client-facing technical reports. Core tech: Burp Suite, OWASP, Linux, Python/Bash, Active Directory tooling.
Conducts mobile application penetration testing engagements for clients, assessing mobile apps and their APIs to find insecure data storage, communications, and cryptography, then delivering clear, actionable reports. Core tooling includes Burp Suite, Frida, Drozer, Objection, Ghidra, and Kali Linux across Android and iOS.
Na Protiviti , não importa de onde você vem, qual é o seu gênero, sua raça, sua orientação sexual ou se você é uma pessoa com deficiência. A diversidade torna nosso ambiente mais vivo, colaborativo e produtivo, nos…
A DevSecOps-oriented DevOps engineer (on-site in Indonesia, 6-month contract) who builds and secures CI/CD pipelines and cloud infrastructure on AWS/GCP. Day to day: integrating security scanning (SAST, DAST, SCA, container scans) into pipelines and managing IaC with Terraform, Docker, and Kubernetes/EKS/GKE.
Leads and mentors the IT Security team in Goa, running day-to-day security operations (monitoring, incident response, vulnerability management) across endpoints, networks, cloud and apps, while coordinating ISO 27001 compliance, audits and client security requests. Stack: SIEM/EDR, Wazuh, Nessus, Burp Suite, Kali Linux, AWS/Azure/GCP.
Alfa-Bank is hiring an Application Security specialist (AppSec Business Partner) to embed with development teams: reviewing architecture and code, threat modeling, triaging scanner findings, and advising on secure development. Requires 3-4+ years in hands-on security analysis, deep AppSec/OWASP knowledge, and expert-level Burp Suite skills; full remote or hybrid in Russia.
Senior cybersecurity specialist in GovTech Singapore's Cyber Security Group (Ministry CISO Office): sets ministry-wide security testing standards (VAPT, red teaming, adversary simulation) and drives Secure-by-Design via SAST/DAST/SCA tooling and DevSecOps CI/CD integration, using tools like Burp Suite, Checkmarx, SonarQube, and Snyk.
Lead the architecture and engineering of cyber defense and AI platforms for the RSAF. You will build production-grade systems for automated vulnerability management and security compliance using AI agentic workflows, React, Node.js, Python, and AWS. This hands-on leadership role involves mentoring engineers and driving DevSecOps practices within a 2-year fixed-term contract.
Senior IT Security Engineer (hands-on IC) running offensive security: penetration tests across infrastructure, networks, AWS/Azure/GCP cloud, and web/mobile apps for a large US healthcare technology environment. Builds custom security tooling, simulates adversary techniques, and supports HIPAA/SOC 2/PCI DSS compliance. Fully remote within the United States.
We couldn't check your fit for this role — add a CV to your profile to see it next time.