Penetration Tester

Brak informacji o wynagrodzeniu

MidZdalnie·KrakówFull-time·Umowa o pracę·B2B

#472566·Dodano wczoraj·5

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

OWASPOSCPOSWE

Podsumowanie oferty

The Penetration Tester will strengthen cybersecurity and vulnerability management for international organizations in a large, multi-tenant environment. The role plans and performs testing across web applications, APIs, networks, Active Directory and cloud environments.

Wymagania

At least 5 years of cybersecurity experience, including at least 3 years in hands-on penetration testing.
Experience with web application and API testing according to OWASP (Top 10, WSTG, ASVS).
Experience conducting internal and external infrastructure testing, including Active Directory attacks.
Working knowledge of standard tools, including Burp Suite Pro, Nmap, Metasploit, BloodHound and Impacket.
At least one recognized hands-on certification: OSCP, OSWE, OSEP, CRTO, eWPTX, GPEN or GWAPT.
Clean professional records and willingness to undergo background verification.
English at Upper-Intermediate level or above.

Nice to have:

Hands-on experience with cloud penetration testing (Azure, Microsoft 365, AWS).
Experience with mobile application testing (Android, iOS).
Red Teaming or Purple Teaming experience, including familiarity with C2 frameworks.
Strong scripting and security tooling skills (Python, PowerShell, Bash).
Experience with PTES, OSSTMM or NIST SP 800-115 methodologies.
Proven security research track record, such as published CVEs or recognized bug bounty findings.

Obowiązki

Plan and perform penetration tests of web applications, APIs, internal and external networks, Active Directory and cloud environments.
Carry out manual testing beyond automated scanning, including exploitation and privilege escalation within agreed rules of engagement.
Validate findings, assess business risk and produce technical and executive reports.
Present results to system owners and management, and support remediation and retesting.
Contribute to red teaming or purple teaming exercises with SOC and detection teams.
Maintain testing methodologies, tools and templates.

Benefity

Opportunity to earn up to an additional EUR 1,000 per month, depending on expertise, included in the annual bonus for participation in company activities.
Access to the corporate training portal and company knowledge base.
Certification compensation, including for AWS and PMP certifications.
Referral program.
Private health insurance and sports compensation, depending on employment type.
Corporate events and amenities, including parties, pizza days, PlayStation, fruit, coffee, snacks and movies.

Premie

Spotkania integracyjne

Opieka zdrowotna

Napoje w biurze

Darmowe przekąski

Andersen

30 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz