Offensive Cyber Security Engineer
- Remote-friendly · fits your timezone
- Posted last month · via Ashby
Full Description
JOIN THE TEAM BUILDING AN AI-FIRST COMPANY 🚀 Hostinger serves more than 5.5 million clients across 150 countries, but we're still excited about what we're creating next. AI is changing how we build products, support customers, work together, and solve problems. It helps us move faster, spend less time on repetitive work, and focus on bigger ideas. If you want your work to influence both what we build and how we build it, we'd like to meet you. Our culture: Guided by 10 company principles https://www.hostinger.com/principles. YOUR ROLE AT HOSTINGER As an Offensive Cyber Security Engineer, you will help safeguard Hostinger’s infrastructure, applications, and customer data against evolving cyber threats. You'll think like an attacker across our hosting platform, customer control panel, APIs, cloud infrastructure, and the AI products we're shipping. You'll break things on purpose, prove the impact, and work with engineers until the fix is in production. You'll chain findings, write the exploit, and help engineers understand why it matters. Curious to learn more? Meet your future Team Lead: Aurimas Rudinskis, Head of Cyber Security https://www.linkedin.com/in/aurimasrudinskis/ YOUR DAY-TO-DAY - Run penetration tests and targeted attack simulations against web apps, APIs, and Linux-based hosting infrastructure. - Hunt for multi-tenant risks: privilege escalations, isolation breakouts, and account takeover paths that could affect many customers at once. - Triage and reproduce external vulnerability reports (responsible disclosure/bug bounty) and turn them into clear, prioritized fixes. - Automate repetitive tasks with custom tooling, recon pipelines, and regression checks, so the same bug isn't found twice. - Test new features before launch, including AI-powered products (prompt injection, data leakage, agent abuse), so security ships with the product instead of after it. - Write reports that engineers actually want to read, and share attacker-mindset knowledge through walkthroughs, internal CTFs, and code reviews. WHAT WILL HELP YOU SUCCEED - Knowledge in penetration testing, application security, or red teaming. Demonstrable CTF, HackTheBox, TryHackMe, or bug bounty experience also counts. - A grasp of web and API vulnerabilities (OWASP Top 10 and beyond). - Linux and networking fundamentals. - An ethical, curious mindset. You've broken something on your own time and learned from it. - Clear written English. A finding only counts if someone understands it and fixes it. MEET YOUR TEAM You'd join a team of thirteen and work closely with the engineers who cover product and infrastructure security. From your first months, you'll co-own a bug bounty pipeline: every report that researchers around the world send us about Hostinger passes through you. You'll reproduce it, decide whether it's real, rate its true severity, and get it to the right team. Day to day, you'd partner with product or infrastructure on fixing validated findings and testing new features before launch. We collaborate through clear findings, retests, and code reviews. The goal is to find weaknesses first, fix them fast, and verify so they stay fixed - security testing that engineers see as help, not a hurdle. BENEFITS YOU'LL LOVE 🚀 360° Growth: You'll never stop learning here. Get access to Reforge https://www.reforge.com/ and CoachHub, go to global conferences, and borrow from our physical and digital libraries. Depending on your location, you can mentor or be mentored through TesoXchange https://tesoxchange.com/. People give each other open feedback https://www.hostinger.com/blog/reaching-your-peak/, share what they know https://www.hostinger.com/blog/learning-culture/, and take on new projects as their skills grow. 🎯 Freedom & responsibility: Work where you do your best work: our offices in Vilnius, Kaunas, Jakarta, or Luxembourg, your home, or anywhere in the world. You plan your own day and own your results, and good ideas go live fast. 💪 Wellness simplified: Your wellbeing comes first. You get time off to recharge, a Headspace https://www.headspace.com/ subscription, and events focused on wellbeing. Depending on your location, you also get health insurance from day one, a gym membership, regular health checks, and clubs for sports, arts, and hobbies. 🎉 Work hard – play hard: We celebrate wins together at Summerfest https://www.youtube.com/watch?v=CPnIDaaq0jc & Winterfest https://www.youtube.com/watch?v=AfytsnQyE2I, Town Halls, team-buildings, and workations. Meet the Client sessions connect you directly with the people you build for. Milestones outside work matter too, so we celebrate weddings, new parenthood, and graduations with you. Compensation starts from €3600 gross/month, depending on your experience and skills. We're always looking for experienced talent to raise the bar. If you're excited about the role but the listed compensation range doesn't align with your expectations, we still encourage you to apply — we're open to adjusting it based on the impact and value you bring. Get ready to take your personal and professional growth to new heights! Join Hostinger today and be part of our journey 🚀 Three. Two. Onboard
Required Skills
Indonesia Context
- Working Hours Overlap:
- Flexible — work your own hours
Explore related
Market data & reports
Salary & skill-demand research built from our own listings data.
- Skills Remote Employers Ask For in the AI EraMost-named skills in active listings by kind, AI-named skills and the fastest risers. Weekly data.
- Indonesia IT Jobs vs Global Remote (2026)Primary analysis of 2,049 listings: methodology, classification rules, downloadable datasets.
- AI-Skill Demand: Indonesia vs Global Remote (2026)10,000+ postings, taxonomy-first classifier, Wilson CIs, pre-registered before analysis.
- Remote ≠ Remote: The Skills That Open Global Work to Indonesians (2026)12,891 remote listings: the highest-paid coding skills are the most geo-locked for Indonesia-based applicants. CC BY 4.0 aggregate dataset.
- The Compliance Layer of the AI Hiring Stack (2026)6,349 remote listings: 77.2% never state who may apply. Methodology and a CC BY 4.0 aggregate dataset.
- AI in Job Ads: Indonesia vs Global (2026)Global engineering ads naming AI rose from 3.4% to 23% after ChatGPT; Indonesian ads went from 2.2% to 2.8%. 2027 scenarios and a CC BY 4.0 dataset.
- Cron vs LLM vs LangGraph vs Agent for Social Posts (2026)A pre-registered test of four ways to turn a blog post into social posts, on two models. Automated checks picked a cron template; the model mattered more than the framework.
- Indonesia Hiring Report: Tech vs Non-TechJob demand by field from aggregate open-job counts — never individual listings.
- Indonesia Salary BenchmarkAggregate salary ranges across roles, with open methodology and dataset.
- Indonesian Remote Work Salary & Demand IndexHow much of the global remote job corpus is open to Indonesia, and what it pays (USD) by role.
- Indonesia Quarterly Labor Market ReportLayoffs, funding, salaries & skills per quarter — open aggregates.
- Remote Market Reports by RoleAuto-generated per role family — skills, seniority, companies, salary.
- Global Remote Salary BenchmarkAnnual salary by role & currency, plus the share of listings open worldwide.