Your expertise: * BSc / MS in computer science or a related field * Previous CVEs in desktop applications * Proficiency with reverse engineering tools * Significant experience in memory exploitation techniques (e.g. gaining code execution from * memory vulnerabilities in modern operating systems) * Familiarity with cloud security best practices * 3+ years of industry experience * OSCP / OSWE / OSED / RET2 certification
Will definitely be a plus: * An attacker mindset: engineers will often want proof before fixes are implemented * Eagerness to learn — you are not expected to know everything coming in, but you should continuously learn new techniques on the job * The ability to communicate clearly, acknowledge mistakes, and disagree when necessary * Demonstrable passion for offensive security * Experience reading, writing and debugging C++ and Python code * Basic experience with memory exploitation techniques * Demonstrable experience with web exploitation techniques and tools (e.g. PortSwigger lab scoreboards) * Excellent written and oral communication skills
You will be involved into: * Reproduce and triage incoming vulnerabilities from security automation/bug bounty programs, then propose granular fixes to engineers * Discover vulnerabilities and construct exploits for core Parallels applications such as Parallels * Remote Application Server * Assist in the CVE disclosure process * Provide threat models and design reviews for teams throughout the company * Assist in tuning existing static analysis, dynamic analysis, and dependency management tools
About the company and project:
ZONE3000 is a 2400+ people family that forms a new cultural code in the software development business. For 25 years we have been focusing on the highest quality of projects and empowering people to think big and make a difference. We are looking for talents who want to create and improve technological solutions for tomorrow and make things as best possible.
We are looking for a highly motivated and talented Application Security Engineer to join their team.
In this role, you will help make security decisions that impact millions of users while gaining hands-on experience in exploit development, vulnerability research, and CVE discovery. The ideal candidate combines an attacker mindset with strong attention to detail and enjoys collaborating with engineering teams to build secure, scalable solutions.
Our client is a global technology company whose products are used by millions of customers worldwide. They are investing heavily in security, innovation, and engineering excellence, offering an opportunity to work on meaningful challenges with real-world impact.
You’ll be joining the company at an exciting stage of growth, working alongside experienced professionals in a collaborative environment where new ideas are encouraged and technical expertise is valued.
The company also promotes a flexible, people-first culture, empowering employees to work in the way that suits them best while maintaining a healthy work-life balance.
