Experienced Penetration Tester Needed for an online poker platform
• *Job Title: Penetration Tester for Online Poker Platform** We are seeking a skilled penetration tester to evaluate the security of our browser-based online poker platform. The role will focus on assessing the security of web applications, APIs, session management, back-end systems, and blockchain transaction processes. • *Key Responsibilities:** - Identify and analyze technical and business-logic vulnerabilities that could impact game integrity, user account balances, and the security of funds. - Conduct security assessments on web applications and APIs, including testing for OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Insecure Direct Object References (IDOR), and rate limiting issues. - Evaluate the security of authentication mechanisms, session management, and cookie handling to identify potential risks such as fixation, hijacking, and token misuse. - Review high-concurrency scenarios, race conditions, and the security of blockchain transactions, particularly on the Polygon network. - Examine cryptographic processes, signing mechanisms, and withdrawal systems to ensure their robustness. - Perform comprehensive business logic and state machine evaluations on betting processes, user balances, and settlement procedures. • *Deliverables:** - Initial assessment report detailing findings and providing remediation recommendations. - Follow-up assessment to verify that identified issues have been addressed. - Final validation report, if necessary, to confirm the effectiveness of the implemented fixes. • *Qualifications:** - Proven experience in securing browser-based financial or gaming platforms, demonstrating strong technical expertise in penetration testing and vulnerability assessment. Apply tot his job