Offensive Cyber Security Engineer (Hostinger, UAB)
Darbdavys: Hostinger, UAB
Miestas: Vilnius
Paskelbta: 2026-10-23
💶 Nuo 3600 €/mėn. Prieš mokesčius · visa darbo diena · nuotolinis darbas: hibridinis · paskelbta 2026-10-16
Kandidatuoti šaltinyje (cv.lt) →
Job description:
Join the team building an AI-first company ?Hostinger serves more than 5.5 million clients across 150 countries, but we're still excited about what we're creating next.AI is changing how we build products, support customers, work together, and solve problems. It helps us move faster, spend less time on repetitive work, and focus on bigger ideas.If you want your work to influence both what we build and how we build it, we'd like to meet you.Our culture: Guided by 10 company principles.Your role at HostingerAs an Offensive Cyber Security Engineer, you will help safeguard Hostinger’s infrastructure, applications, and customer data against evolving cyber threats. You'll think like an attacker across our hosting platform, customer control panel, APIs, cloud infrastructure, and the AI products we're shipping. You'll break things on purpose, prove the impact, and work with engineers until the fix is in production. You'll chain findings, write the exploit, and help engineers understand why it matters.Curious to learn more? Meet your future Team Lead: Aurimas Rudinskis, Head of Cyber SecurityYour day-to-day
Run penetration tests and targeted attack simulations against web apps, APIs, and Linux-based hosting infrastructure.
Hunt for multi-tenant risks: privilege escalations, isolation breakouts, and account takeover paths that could affect many customers at once.
Triage and reproduce external vulnerability reports (responsible disclosure/bug bounty) and turn them into clear, prioritized fixes.
Automate repetitive tasks with custom tooling, recon pipelines, and regression checks, so the same bug isn't found twice.
Test new features before launch, including AI-powered products (prompt injection, data leakage, agent abuse), so security ships with the product instead of after it.
Write reports that engineers actually want to read, and share attacker-mindset knowledge through walkthroughs, internal CTFs, and code reviews.
Meet your teamYou'd join a team of thirteen and work closely with the engineers who cover product and infrastructure security. From your first months, you'll co-own a bug bounty pipeline: every report that researchers around the world send us about Hostinger passes through you. You'll reproduce it, decide whether it's real, rate its true severity, and get it to the right team. Day to day, you'd partner with product or infrastructure on fixing validated findings and testing new features before launch.We collaborate through clear findings, retests, and code reviews. The goal is to find weaknesses first, fix them fast, and verify so they stay fixed - security testing that engineers see as help, not a hurdle.
Requirements:
Knowledge in penetration testing, application security, or red teaming. Demonstrable CTF, HackTheBox, TryHackMe, or bug bounty experience also counts.
A grasp of web and API vulnerabilities (OWASP Top 10 and beyond).
Linux and networking fundamentals.
An ethical, curious mindset. You've broken something on your…
Join the team building an AI-first company ?Hostinger serves more than 5.5 million clients across 150 countries, but we're still excited about what we're creating next.AI is changing how we build products, support customers, work together, and solve problems. It helps us move faster, spend less time on repetitive work, and focus on bigger ideas.If you want your work to influence both what we build and how we build it, we'd like to meet you.Our culture: Guided by 10 company principles.Your role at HostingerAs an Offensive Cyber Security Engineer, you will help safeguard Hostinger’s infrastructure, applications, and customer data against evolving cyber threats. You'll think like an attacker across our hosting platform, customer control panel, APIs, cloud infrastructure, and the AI products we're shipping. You'll break things on purpose, prove the impact, and work with engineers until the fix is in production. You'll chain findings, write the exploit, and help engineers understand why it matters.Curious to learn more? Meet your future Team Lead: Aurimas Rudinskis, Head of Cyber SecurityYour day-to-day
Run penetration tests and targeted attack simulations against web apps, APIs, and Linux-based hosting infrastructure.
Hunt for multi-tenant risks: privilege escalations, isolation breakouts, and account takeover paths that could affect many customers at once.
Triage and reproduce external vulnerability reports (responsible disclosure/bug bounty) and turn them into clear, prioritized fixes.
Automate repetitive tasks with custom tooling, recon pipelines, and regression checks, so the same bug isn't found twice.
Test new features before launch, including AI-powered products (prompt injection, data leakage, agent abuse), so security ships with the product instead of after it.
Write reports that engineers actually want to read, and share attacker-mindset knowledge through walkthroughs, internal CTFs, and code reviews.
Meet your teamYou'd join a team of thirteen and work closely with the engineers who cover product and infrastructure security. From your first months, you'll co-own a bug bounty pipeline: every report that researchers around the world send us about Hostinger passes through you. You'll reproduce it, decide whether it's real, rate its true severity, and get it to the right team. Day to day, you'd partner with product or infrastructure on fixing validated findings and testing new features before launch.We collaborate through clear findings, retests, and code reviews. The goal is to find weaknesses first, fix them fast, and verify so they stay fixed - security testing that engineers see as help, not a hurdle.
Requirements:
Knowledge in penetration testing, application security, or red teaming. Demonstrable CTF, HackTheBox, TryHackMe, or bug bounty experience also counts.
A grasp of web and API vulnerabilities (OWASP Top 10 and beyond).
Linux and networking fundamentals.
An ethical, curious mindset. You've broken something on your…