BARVATECH LTD logo

Senior Penetration Tester (Gaming & Crypto)

BARVATECH LTD·Salary not specified

Job description

About the Position

We are seeking a Senior Penetration Tester (Gaming & Crypto) to join our team for a Casino project on a per-project, part-time basis.

About the Company

We are a Software Engineering company with expertise in FinTech and Blockchain. We have a strong software engineering culture, a fast development pace, and we focus on long-term relationships with both employees and customers.

Required Skills

Gaming / Gambling Security

  • Experience testing online casino platforms
  • Experience testing lottery or raffle systems
  • Experience validating provably fair implementations
  • Understanding of RNG and cryptographic randomness
  • Ability to identify methods for manipulating game outcomes
  • Experience testing bonus abuse, referral abuse, and promotional exploits
  • Experience identifying methods to bypass betting limits and wagering requirements

Responsibilities

The successful candidate will perform comprehensive security testing of two production-ready platforms prior to public launch.

Casino Platform Assessment

  • Attempt to exploit business logic flows that could allow players to:

    • manipulate game outcomes
    • abuse bonus systems
    • bypass wagering requirements
    • duplicate winnings
    • manipulate balances
    • bypass betting limits
    • exploit race conditions during betting
    • perform multiple withdrawals
    • abuse promotions, referrals, or loyalty programs
  • Test crypto and fiat wallet functionality including:

    • deposits
    • withdrawals
    • transfers
    • balance consistency
    • concurrency handling
    • transaction validation
  • Assess protections against automated bots, scripted abuse, and account farming

Lottery Platform Assessment

  • Validate the integrity of the lottery draw process
  • Verify that the custom provably fair mechanism cannot be manipulated
  • Attempt to predict, influence, or replay lottery outcomes
  • Test purchase workflows for duplicate purchases, payment manipulation, and race conditions
  • Verify prize allocation logic for both cash and physical item rewards
  • Assess wallet integrity during ticket purchases, refunds, and prize payouts
  • Test against abuse scenarios including:
    • multiple simultaneous purchase requests
    • replay attacks
    • prize claim manipulation
    • duplicate redemption
    • account abuse
    • automated purchasing bots

© BARVATECH LTD. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.

BarvaTech is an Israeli IT company with Ukrainian roots, headquartered in Tel Aviv.Who We are?Software Engineering company with expertise in FinTech, Blockchain, and EduTech. Strong software engineering culture. We do things long-term. We build trust and relationships with employees and customers. Develop outsource and own products with modern technologies and tools.About us:✔️Trust: no micromanagement and no timetracking✔️Comfort: work full remote with flexible hours (from 9 −11 till17-19)✔️Work-life balance: vacation 24 days + 12 days off✔️Transparency: get news at monthly appointments with CEO✔️Don’t work with russia and support UkraineWe invite you to join our team at BarvaTech!

More at BARVATECH LTD

All 8 roles

Popular searches