Penetration Tester
New
A
AndersenCybersecurity
Workplace type: remote; Locations: Kraków, Aleja Pokoju 18, Warszawa, Rondo Ignacego Daszyńskiego 1, München, Rosa-Bavarese-Straße 3, Budapest, Árpád fejedelem útja 26 - 28, București, 8-10 Strada Tudor ArgheziFull-TimeMiddle
SalaryUp to an additional 1,000 EUR per month, depending on the level of expertise, which will be included in the annual bonus
Apply NowOpens the employer's application page
Job Details
- Languages
- Level of English – from Upper-Intermediate and above.
- Experience
- Experience in cybersecurity for 5+ years, including 3+ years in hands-on penetration testing.
Requirements
- Have 5+ years of cybersecurity experience, including 3+ years in hands-on penetration testing.
- Have experience with web application and API testing according to OWASP Top 10, WSTG, and ASVS.
- Have experience conducting internal and external infrastructure testing, including Active Directory attacks.
- Have working knowledge of standard tools such as Burp Suite Pro, Nmap, Metasploit, BloodHound, and Impacket.
- Hold at least one recognized hands-on certification: OSCP, OSWE, OSEP, CRTO, eWPTX, GPEN, or GWAPT.
- Have clean professional records and be willing to undergo background verification.
- Have English proficiency at Upper-Intermediate level or above.
- Hands-on cloud penetration testing experience with Azure, Microsoft 365, or AWS is a plus.
- Mobile application testing experience with Android or iOS is a plus.
- Red Teaming or Purple Teaming experience, including familiarity with C2 frameworks, is a plus.
- Scripting and security tooling skills in Python, PowerShell, or Bash are a plus.
- Experience with PTES, OSSTMM, or NIST SP 800-115 methodologies is a plus.
- A security research track record, such as published CVEs or recognized bug bounty findings, is a plus.
Responsibilities
- Plan and perform penetration tests of web applications, APIs, internal and external networks, Active Directory, and cloud environments.
- Carry out manual testing beyond automated scanning, including exploitation and privilege escalation within the agreed rules of engagement.
- Validate findings, assess business risk, and produce technical and executive reports.
- Present results to system owners and management.
- Support remediation and retesting.
- Contribute to red teaming or purple teaming exercises with SOC and detection teams.
- Maintain testing methodologies, tools, and templates.
View Full Description & ApplyYou'll be redirected to the employer's site
