Protect Trivia1 where anyone can reach it: anonymous players, join codes, the anonymous site chatbot and the tokens that outside assistants use.
This role is with Trivia1 (trivia1.com).
Nice to have:
Experience with rate limiting and abuse prevention.
Responsibilities
Review how join codes, team codes and game sessions are created and how guessing is limited.
Review the token system for outside assistants: scope, storage of the digest and revocation.
Review the anonymous chatbot for abuse and for answers that expose account data.
Test sign-in, password reset and account pages for weaknesses and write clear findings.
Follow each finding to its fix and check it.
Requirements
Experience in application security for PHP or Laravel web applications.
Understanding of common web vulnerabilities and how to test for them.
Clear technical writing in English.
Apply to this job
Applications to this job go to Questah Staffing. Create a contractor account with Questah Staffing, or sign in, and you come back to this page to apply.