Certifications are not required but considered a plus.
Lead and deliver end-to-end penetration tests across mobile applications (iOS & Android), web applications and APIs, infrastructure and network environments
Perform manual penetration testing, source code reviews, and configuration assessments
Clearly document findings, including root cause analysis and business risk impact
Design and demonstrate proof-of-concept exploits when required
Collaborate with DevOps and engineering teams to support remediation efforts, improve secure development practices, and automate repetitive security testing tasks
Assess product release risk and identify potential misuse scenarios
Track remediation activities and support risk acceptance processes
Support incident response activities when required
Evaluate new security testing technologies and recommend improvements
Monitor security industry developments and emerging threats
Contribute to process enhancements and quality improvements
Mentor junior team members and support knowledge sharing
B2B contract
Hybrid work model (6 days/month in office – Kraków preferred or Warsaw)
