API Pentester

Experis to światowy lider rekrutacji specjalistów i kadry zarządzającej w kluczowych obszarach IT. Z nami znajdziesz konkurencyjne oferty zatrudnienia oraz ciekawe projekty IT skierowane zarówno do ekspertów z wieloletnim doświadczeniem, jak i osób, które dopiero zaczynają swoją przygodę w branży IT.

• 5+ years of hands-on penetration testing or offensive security experience, ideally within a consulting environment.
• Strong expertise in at least three of the following: web, network, mobile, or Active Directory security testing.
• Experience with tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Cobalt Strike, Nessus, OpenVAS, Frida, and MobSF.
• Scripting skills in Python, PowerShell, or Bash.
• Strong communication, reporting, and client-facing skills.

Certifications:

• OSCP
• CREST CRT/CPSA
• CRTP or CRTO

Nice to have:

• Big 4 or cybersecurity consultancy experience.
• Cloud security testing (AWS, Azure, GCP).
• Kubernetes/container security knowledge.
• Security research, CVEs, conference talks, or CTF achievements.

• Lead and perform penetration tests across web applications, APIs, internal/external networks, mobile applications, cloud environments, and Active Directory.
• Conduct advanced Active Directory security assessments and infrastructure testing.
• Develop custom scripts, tooling, and proof-of-concept exploits.
• Manage engagements from scoping to reporting and remediation validation.
• Present findings to technical and business stakeholders.
• Support proposal development, effort estimation, and pre-sales activities.
• Mentor junior team members and contribute to internal methodologies and best practices.