Senior Pentester | German

We are looking for an experienced Senior Pentester who wants to develop in an international environment and implement advanced projects in the field of cybersecurity. In this position, you will have the opportunity to work on diverse security-related projects - from classic penetration testing, through application security analysis, to Red Team activities, Threat Modelling, or Security Architecture.

Engagement terms:

Location: 100% remote Start: ASAP (we accept candidates with a max 1-month notice period) Rate (determined individually): 125 - 145 PLN net / h Engagement: B2B (outsourcing via 1dea), full-time, long-term

Daily tasks

• Conducting penetration tests of web applications, mobile applications, infrastructure, and cloud environments.
• Identifying vulnerabilities and potential attack paths and assessing their impact on organizational security.
• Analyzing detected threats and developing practical recommendations for their elimination or risk mitigation.
• Verifying the security level of applications and IT infrastructure.
• Participating in Red Team projects, including activities in the areas of OSINT, social engineering, and MITRE ATT&CK.
• Performing code analysis for potential vulnerabilities and security threats.
• Preparing detailed documentation, reports from conducted tests, and recommendations for clients.
• Presenting the results of conducted analyses and translating technical issues into business-understandable conclusions.
• Collaborating with other cybersecurity experts on international projects.

Requirements

We are looking for an experienced cybersecurity specialist who has at least 4 years of experience in the field of IT Security / DevSecOps / penetration testing and feels comfortable in practical work with system security. Key requirements will be: very good knowledge of issues related to web application security and OWASP Top 10, experience in conducting penetration tests, good knowledge of computer networks, network protocols, and operating systems, knowledge of how web applications work - both on the backend and frontend sides, ability to analyze vulnerabilities and assess their potential impact, knowledge of Red Team methodologies, including MITRE, OSINT, and social engineering, ability to translate technical issues into clear and understandable recommendations for business people, independence, responsibility, and very good work organization, German language at a minimum B2+ level, very good knowledge of the English language.

Must have: Security