Senior Pentester

Project overview

We are looking for an experienced Senior Pentester who wants to grow in an international environment and carry out advanced cybersecurity projects.

In this role, you will have the opportunity to work on diverse security projects - from classic penetration tests, through application security analysis, to activities in the Red Team, Threat Modelling, or Security Architecture areas.

Engagement Conditions:

Requirements

An experienced cybersecurity specialist is sought, who has at least 4 years of experience in IT Security / DevSecOps / penetration testing and is comfortable with practical system security work.

• Very good knowledge of web application security issues and OWASP Top 10,
• Experience in conducting penetration tests,
• Good knowledge of computer networks, network protocols, and operating systems,
• Knowledge of how web applications work
• both on the backend and frontend,
• Ability to analyze vulnerabilities and assess their potential impact,
• Knowledge of Red Team methodologies, including MITRE, OSINT, and social engineering,
• Ability to translate technical issues into clear and understandable recommendations for business stakeholders,
• Independence, responsibility, and very good work organization,
• Very good knowledge of the English language.

Project details

100% remote

ASAP (we accept candidates with a notice period of max 1 month)

Rate (individually determined): 125 - 150 PLN net / h

Engagement: B2B (outsourcing with 1dea), full-time, long-term

Scope of Responsibilities

• Conducting penetration tests of web applications, mobile applications, infrastructure, and cloud environments.
• Identifying vulnerabilities and potential attack paths and assessing their impact on the organization's security.
• Analyzing identified threats and developing practical recommendations for their elimination or risk mitigation.
• Verifying the security level of applications and IT infrastructure.
• Participating in Red Team projects, including OSINT, social engineering, and MITRE ATT&CK activities.
• Conducting code analysis for potential vulnerabilities and security threats.
• Preparing detailed documentation, reports from conducted tests, and recommendations for clients.
• Presenting the results of conducted analyses and translating technical issues into conclusions understandable to the business.
• Collaborating with other cybersecurity experts on international projects.
• Start: flexible
• Remote: remote
• Location: Warszawa, Flory 9, PL
• Rate: 125-150 EUR/h
• Languages: Polish, English