About the project
The project provides cybersecurity and digital services for international organizations in a large, heterogeneous, multi-tenant environment. It strengthens vulnerability management capabilities to identify, assess, prioritize, and mitigate security risks across organizations worldwide. The customer provides digital infrastructure, cloud services, cybersecurity, data-driven solutions, and managed IT support, helping organizations modernize technology environments, strengthen security, and improve the reliability and scalability of digital operations.
Responsibilities
•Plan and perform penetration tests of web applications, APIs, internal and external networks, Active Directory, and cloud environments
•Conduct manual testing beyond automated scanning, including exploitation and privilege escalation within the agreed rules of engagement
•Validate findings, assess business risk, and produce clear technical and executive reports
•Present results to system owners and management, and support remediation and retesting
•Contribute to red teaming or purple teaming exercises with SOC and detection teams
•Maintain testing methodologies, tools, and templates
Requirements
•5+ years of cybersecurity experience, including 3+ years of hands-on penetration testing
•Experience testing web applications and APIs according to OWASP (Top 10, WSTG, ASVS)
•Experience conducting internal and external infrastructure testing, including Active Directory attacks
•Working knowledge of standard tools such as Burp Suite Pro, Nmap, Metasploit, BloodHound, and Impacket
•At least one recognized hands-on certification: OSCP, OSWE, OSEP, CRTO, eWPTX, GPEN, or GWAPT
•Clean professional records and willingness to undergo background verification
•Upper-Intermediate or higher English
Nice to have
•Hands-on cloud penetration testing (Azure, Microsoft 365, AWS)
•Mobile application testing (Android, iOS)
•Red Teaming or Purple Teaming experience, including familiarity with C2 frameworks
•Scripting and security tooling skills (Python, PowerShell, Bash)
•Experience with PTES, OSSTMM, or NIST SP 800-115 methodologies
•A proven security research track record such as published CVEs or recognized bug bounty findings
Conditions
•The opportunity to change projects and/or develop expertise in an interesting business domain
•Professional, financial, and career growth; mentoring and adaptation systems for each new employee
•Opportunity to earn up to an additional 1,000 EUR per month depending on expertise, included in the annual bonus, by participating in company activities
•Access to the corporate training portal and its regularly updated knowledge base
•Corporate events and amenities, including parties, pizza days, PlayStation, fruit, coffee, snacks, and movies
•Certification compensation (AWS, PMP, etc.)
•Referral program
•Private health insurance and sports compensation, depending on the type of employment
•Work locations: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Hungary, Italy, Latvia, Lithuania, Luxembourg, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, and The Netherlands
