Security Specialist

Quibity is an international eSIM platform helping travellers stay connected worldwide. We’re looking for a hands-on Security Specialist / Penetration Tester to identify vulnerabilities, strengthen our security, and help protect our customers, data, and infrastructure.

Working closely with our engineering team, you will:

• Plan and execute penetration tests across our web applications, APIs, and cloud infrastructure.
• Identify weaknesses in authentication, access controls, payment flows, and eSIM provisioning.
• Investigate business logic vulnerabilities, account takeover risks, and API abuse.
• Review application code and infrastructure configurations to detect security issues.
• Deliver actionable reports with reproducible findings, realistic impact assessments, and remediation guidance.
• Support developers in implementing fixes and verify their effectiveness.
• Help integrate security checks into development and deployment workflows.

You should have proven experience in web and API penetration testing, a strong understanding of OWASP vulnerabilities, and practical knowledge of Linux, networking, and cloud security. Proficiency with tools such as Burp Suite and scripting in Python, Bash, or similar languages is essential.

Experience with AWS, Cloudflare, PHP and database security is a plus. Relevant certifications such as OSCP or a track record of responsible vulnerability disclosures are welcome.

We value technical depth, clear communication, sound judgment, and the ability to prioritise security risks based on their real business impact.