Offensive Cyber Security Engineer

Join the team building an AI-first company ?Hostinger serves more than 5.5 million clients across 150 countries, but we're still excited about what we're creating next.AI is changing how we build products, support customers, work together, and solve problems. It helps us move faster, spend less time on repetitive work, and focus on bigger ideas.If you want your work to influence both what we build and how we build it, we'd like to meet you.Our culture: Guided by 10 company principles.Your role at HostingerAs an Offensive Cyber Security Engineer, you will help safeguard Hostinger’s infrastructure, applications, and customer data against evolving cyber threats. You'll think like an attacker across our hosting platform, customer control panel, APIs, cloud infrastructure, and the AI products we're shipping. You'll break things on purpose, prove the impact, and work with engineers until the fix is in production. You'll chain findings, write the exploit, and help engineers understand why it matters.Curious to learn more? Meet your future Team Lead: Aurimas Rudinskis, Head of Cyber SecurityYour day-to-day

• Run penetration tests and targeted attack simulations against web apps, APIs, and Linux-based hosting infrastructure.
• Hunt for multi-tenant risks: privilege escalations, isolation breakouts, and account takeover paths that could affect many customers at once.
• Triage and reproduce external vulnerability reports (responsible disclosure/bug bounty) and turn them into clear, prioritized fixes.
• Automate repetitive tasks with custom tooling, recon pipelines, and regression checks, so the same bug isn't found twice.
• Test new features before launch, including AI-powered products (prompt injection, data leakage, agent abuse), so security ships with the product instead of after it.
• Write reports that engineers actually want to read, and share attacker-mindset knowledge through walkthroughs, internal CTFs, and code reviews.

Meet your teamYou'd join a team of thirteen and work closely with the engineers who cover product and infrastructure security. From your first months, you'll co-own a bug bounty pipeline: every report that researchers around the world send us about Hostinger passes through you. You'll reproduce it, decide whether it's real, rate its true severity, and get it to the right team. Day to day, you'd partner with product or infrastructure on fixing validated findings and testing new features before launch.We collaborate through clear findings, retests, and code reviews. The goal is to find weaknesses first, fix them fast, and verify so they stay fixed - security testing that engineers see as help, not a hurdle.

• Knowledge in penetration testing, application security, or red teaming. Demonstrable CTF, HackTheBox, TryHackMe, or bug bounty experience also counts.
• A grasp of web and API vulnerabilities (OWASP Top 10 and beyond).
• Linux and networking fundamentals.
• An ethical, curious mindset. You've broken something on your own time and learned from it.
• Clear written English. A finding only counts if someone understands it and fixes it.

• 360° Growth: You'll never stop learning here. Get access to and CoachHub, go to global conferences, and borrow from our physical and digital libraries. Depending on your location, you can mentor or be mentored throughReforge . PeopleTesoXchange ,give each other open feedback , and take on new projects as their skills grow.share what they know
• Freedom & responsibility: Work where you do your best work: our offices in Vilnius, Kaunas, Jakarta, or Luxembourg, your home, or anywhere in the world. You plan your own day and own your results, and good ideas go live fast.
• Wellness simplified: Your wellbeing comes first. You get time off to recharge, a subscription, and events focused on wellbeing. Depending on your location, you also get health insurance from day one, a gym membership, regular health checks, and clubs for sports, arts, and hobbies.Headspace
• Work hard – play hard: We celebrate wins together at & Summerfest, Town Halls, team-buildings, and workations. Meet the Client sessions connect you directly with the people you build for. Milestones outside work matter too, so we celebrate weddings, new parenthood, and graduations with you.Winterfest