Senior Penetration Tester

1dea is a recruitment and IT outsourcing company focusing on expert and managerial positions. It operates in IT, Transport, Spedition, Logistics, Property & Construction, and Tax & Legal sectors. The company is based in Poland with an international network.

• Minimum 5 years of experience in penetration testing.
• Proficient in at least three areas: web application testing, internal/external infrastructure testing, Active Directory security, and mobile application testing.
• Experience with tools such as Burp Suite, Nmap, Metasploit, BloodHound, SharpHound, Impacket, CrackMapExec, NetExec, Nessus, OpenVAS, Cobalt Strike, Frida, MobSF, and Objection.
• Good knowledge of computer networks, Windows and Linux systems, authentication mechanisms, and security testing techniques.
• Ability to automate tasks using Python, PowerShell, or Bash.
• Fluency in Polish and advanced proficiency in English.

• Conduct penetration tests on web applications, APIs, network infrastructure, cloud environments, mobile apps, and Active Directory.
• Verify vulnerabilities identified by automated tools and perform manual security analysis.
• Perform advanced Active Directory security tests including privilege escalation, lateral movement, attack path analysis, and Kerberos mechanisms.
• Assess infrastructure security from both authenticated user and external perspectives.
• Test mobile applications on Android and iOS platforms.
• Develop custom scripts and tools to support testing and prepare proof-of-concept for detected vulnerabilities.
• Verify the effectiveness of implemented fixes and perform confirmation tests.
• Document testing procedures and prepare high-quality technical reports.