Web Penetration Tester
Magic Media
Posted: January 14, 2026
Interested in this position?
Create a free account to apply with AI-powered matching
Quick Summary
We are looking for a Web Penetration Tester to join our team in Rio de Janeiro, Brazil. The ideal candidate should have experience in penetration testing and be familiar with modern technology and processes.
Required Skills
Job Description
Cyrex, a Magic Media company, is a media and tech start-up powered by creativity and innovation. We work with leading developers and publishers in the games industry, providing support and solutions designed around individual needs and carried out by global experts.
We produce high-quality results by constantly staying at the forefront of modern technology and cutting-edge processes and practices. The best of our team are known for their strong initiative, not just in taking care of their day-to-day responsibilities but in helping identify ways to build, grow, and do more in their work.
We’re currently looking for a dynamic addition to the team to help work on exciting cybersecurity and development projects for the video games industry. The ideal candidate will work with cross-functional teams to develop critical products and services for our clients and offer excellent technical support to our teams. If you’re an enthusiastic, motivated, and lateral thinker, our team is waiting to meet you!
This is a project based position, ideal for someone skilled in web security, mobile hacking, and basic cloud security. It does not require deep knowledge of reverse engineering or low-level networking.
Responsibilities
• Penetration testing of web apps, mobile apps and REST & GraphQL APIs.
• Review source code for security issues.
• Assess mobile app protections (certificate pinning, jailbreak/root detection, code obfuscation) and backend integrations.
• Produce clear reports with PoCs and remediation guidance; verify fixes.
Requirements:
• 5+ years in web and mobile penetration testing.
• Strong OWASP Top 10 knowledge.
• Basic cloud security knowledge.
• Manual testing first mindset, deep burp suite knowledge.
• Reporting: clear flaws write-ups.
• Source code review skills: sinks/sources, ability to spot misconfigurations.
Working knowledge of
• Basic python skills.
• Frida, apktool, jadx
• Burp suite plugins creation would be a plus.
Benefits:
• An opportunity to hone and improve your skills by applying them to a diverse variety of gaming projects
• The chance to work closely with a team of like-minded creative professionals in a fast-paced, multicultural environment on a variety of gaming projects
• A competitive salary
• Ongoing training and professional self-improvement opportunities
If this sounds interesting to you and you’d like to be at the forefront of cybersecurity, we’d love to hear from you.