Pentester

Firma apreel powstała w kwietniu 2010 roku. W miarę rozwoju firmy i równolegle ze wzrostem poziomu zaufania klientów, jej działalność poszerzyła się o usługi Outsourcingu Specjalistów IT. Dziś to właśnie ten obszar stanowi główny filar działalności apreel.

• 5+ years of hands-on penetration testing / offensive security experience, ideally including consultancy or multi-client delivery.
• Demonstrable depth across at least three of: web application, network (internal/external), mobile, and Active Directory testing.
• Strong command of industry-standard tooling including Burp Suite, Nmap, Metasploit, BloodHound/SharpHound, Impacket, CrackMapExec/NetExec, Cobalt Strike or equivalent C2, Nessus/OpenVAS, and mobile tooling such as Frida, MobSF, objection.
• Solid grounding in networking, operating system internals (Windows and Linux), authentication protocols, and common exploitation and post-exploitation techniques.
• Scripting/automation ability in Python, PowerShell, and/or Bash.
• Excellent report-writing and communication skills able to explain complex technical risk to non-technical audiences.
• Experience managing client relationships and/or leading small delivery teams or workstreams.

Certifications - Required at least one of:

• OSCP (Offensive Security Certified Professional)

• CREST CRT / CPSA, with CCT (App or Infra) strongly preferred

• CRTP / CRTO

• 4 lata doświadczenia na podobnym stanowisku

• Znajomości: Penetration testing, PowerShell, Python

• Języki: Polski, Angielski

• Manage assigned engagements from initiation through reporting and closure.
• Act as the primary point of contact for clients during testing activities.
• Review and quality-assure technical findings and reports.
• Assist with scoping, estimation, and proposal development.
• Present findings to both technical and non-technical stakeholders.
• Contribute to internal methodology, tooling, playbooks, and knowledge-sharing.
• Support business development, including proposals, scoping calls, and pre-sales technical input.
• Help uphold delivery standards aligned to recognized frameworks.