Penetration Testing Lead

Mindbox is a tech-driven company connecting top IT talents with technology projects for leading enterprises across Europe. The role involves leading a team of cybersecurity experts to shape global security standards and deliver high-quality penetration testing services.

• Minimum 5 years of hands-on experience in penetration testing.
• Proven ability to lead teams and manage security projects.
• Expertise in at least two penetration testing domains (e.g., infrastructure, applications, mobile).
• Strong understanding of iOS and Android security models and common vulnerabilities in mobile and financial applications.
• Practical experience in testing infrastructure, web, and mobile technologies using manual and automated methods.
• Excellent knowledge of TCP/IP and related security implications.
• Strong web application testing experience.
• Proficiency in programming/scripting.
• Solid understanding of applied cryptography in application development.
• Ability to communicate effectively with both technical and non-technical audiences.
• Critical thinking and problem-solving abilities.
• Excellent written and verbal communication skills in English.
• Strong time management and organizational skills.
• Ability to work independently and lead teams of any size.
• No mandatory certifications, but relevant industry certifications are a plus.

• Lead and manage a team of penetration testers to conduct comprehensive security assessments.
• Ensure the delivery of high-quality reports and actionable recommendations.
• Develop and continuously improve penetration testing methodologies and best practices.
• Document findings, lessons learned, and security trends to enhance the organization’s knowledge base.
• Collaborate with regional and global Penetration Testing Leads to standardize processes and share expertise.
• Mentor and support team members, fostering a culture of knowledge sharing and professional growth.
• Work closely with internal stakeholders to assess and address security risks.
• Stay up to date with emerging threats, technologies, and attack techniques to maintain effective testing capabilities.