Offensive Cyber Security Engineer (Lithuania)

Stack

Responsibilities

• ▹Run penetration tests and targeted attack simulations against web apps, APIs and Linux-based hosting infrastructure
• ▹Hunt for multi-tenant risks: privilege escalations, isolation breakouts and account takeover paths
• ▹Triage and reproduce external vulnerability reports (responsible disclosure/bug bounty) and turn them into clear, prioritized fixes
• ▹Automate repetitive tasks with custom tooling, recon pipelines and regression checks
• ▹Test new features before launch, including AI-powered products (prompt injection, data leakage, agent abuse)
• ▹Write readable reports and share knowledge through walkthroughs, internal CTFs and code reviews
• ▹Co-own the bug bounty pipeline: validate reports, rate true severity and route them to the right team

Requirements

• ▹Knowledge in penetration testing, application security or red teaming
• ▹Grasp of web and API vulnerabilities (OWASP Top 10 and beyond)
• ▹Linux and networking fundamentals
• ▹An ethical, curious mindset
• ▹Clear written English

Nice to have

• ▹Demonstrable CTF, HackTheBox, TryHackMe or bug bounty experience

Soft skills

What we offer

• ▹Learning opportunities: Reforge, CoachHub, global conferences, libraries, mentoring, internal mobility
• ▹Modern offices in Kaunas and Vilnius, work from home or anywhere, flexible schedule
• ▹Insurance from day 1, gym memberships, recharge leave, Headspace subscriptions, regular health checks
• ▹Company events: Summerfest, Winterfest, Town Hall, team-buildings, workations
• ▹Access to the Žalgiris Arena VIP Lounge, milestone gifts for weddings, new parenthood and graduations
• ▹Compensation from €3600 gross/month, depending on experience and skills

About the company

Hostinger serves more than 5.5 million clients across 150 countries and builds its products as an AI-first company.