Penetration Tester - WebAPP and API

People More is a company working on projects for a large client base in Poland and abroad, building projects from scratch or supporting partner solutions in UX, UI, frontend, backend, and mobile technologies. They work directly with clients worldwide and offer a range of projects with the ability to change.

• 4+ years of hands-on offensive security experience, preferably in a cybersecurity consultancy or multi-client environment.
• Strong expertise in at least three areas: web/API, network, mobile, or Active Directory testing.
• Ability to independently lead penetration testing engagements—from scoping and estimation to reporting and remediation retesting.
• Advanced proficiency with tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, NetExec, Cobalt Strike, and Frida.
• Experience developing scripts and PoC exploits using Python, PowerShell, or Bash.
• Strong client-facing, technical reporting, and stakeholder communication skills.
• At least one certification: OSCP, CRTP, CRTO, CREST CRT, CPSA, CCT App, or CCT Infra.
• Very good English and Polish language skills.

• Lead end-to-end penetration tests and remediation retests.
• Perform advanced Active Directory assessments, including privilege escalation, lateral movement, and attack path analysis.
• Develop custom scripts and PoC exploits using Python, PowerShell, or Bash.
• Manage engagements from scoping and estimation to reporting.
• Review technical findings and support pre-sales activities.
• Communicate risks and recommendations to technical and non-technical stakeholders.