The Kow Company Ltd.
Requirements
Education
- Bachelor of Science (BSc) in Computer Science & Engineering
- OSCP — Offensive Security Certified Professional
- CEH — Certified Ethical Hacker
- eJPT — eLearnSecurity Junior Penetration Tester
- eCPPT — eLearnSecurity Certified Professional Penetration Tester
- eWPT — eLearnSecurity Web Application Penetration Tester
- Security+ — CompTIA Security+
Experience
- At most 2 years
- The applicants should have experience in the following business area(s): Software Company, IT Enabled Service, Development Agency, Developer, E-commerce, Business-to-Business (B2B) Software and Services Startup
- Freshers are also encouraged to apply.
Additional Requirements
- Age 20 to 35 years
Responsibilities & Context
About the Role
You’ll focus primarily on web and API penetration testing. Day-to-day, you’ll live in Burp Suite, model findings against OWASP Top 10 / ASVS, and spin up quick shell/Python automations (including AI-assisted “vibe coding”) to speed recon, testing, and reporting.
What You’ll Do
- Web & API pentesting (primary): Scope, test, validate, and document exploitable issues (XSS, SQLi, IDOR, SSRF, authN/Z flaws, logic bugs, deserialization, RCE).
- Burp Suite power use: Advanced proxying, macros/session handling, Intruder strategies, Repeater/Comparer/Sequencer, extender/DIY helpers.
- Recon & discovery: Subdomains/tech fingerprinting, parameter mining, content discovery, auth & permission testing, fuzzing.
- AI automation / “vibe coding”: Use LLMs responsibly to scaffold scripts, generate wordlists/payloads, summarize logs, and draft report sections—always human-verified.
- Scripting & tooling: Build/maintain small utilities (Bash/PowerShell/Python) and wrappers for ffuf, nuclei, dirsearch, sqlmap, etc.
- Reporting & comms: Write crisp PoCs, risk ratings and remediation guidance; present findings to engineering and product.
Skills & Expertise
Workplace
Work at office
Employment Status
Full Time
Job Location
Dhaka
Company Information
The Kow Company Ltd.
Address:
Navana DH Tower (2nd Floor), Plot-6, Panthapath, PS-Tejgoan, Dhaka.