Application Pentester

About the role

We are looking for an Application Pentester to protect our web, mobile and API applications. You will lead proactive penetration testing, identify vulnerabilities, and ensure they are remediated on time, helping to keep our products secure and resilient.

Key responsibilities

• Perform comprehensive penetration tests on web, mobile and API components, both authenticated and unauthenticated.
• Track tactical security tasks, ensuring at least 90% completion within planned timelines.
• Validate findings to eliminate false positives and assess business impact.
• Classify and prioritize vulnerabilities using severity and risk metrics.
• Assign remediation owners, set SLAs, and monitor progress until closure.
• Conduct retesting to confirm effective remediation.
• Explore, evaluate and implement automated security testing tools through proof‑of‑concepts.
• Report status regularly to stakeholders and maintain detailed documentation.

Required profile

• Bachelor’s degree in Information Technology or Computer Science.
• Completed or certified security courses such as PenTest+, OSCP, OSWA or OSWE.
• Adversarial mindset with strong self‑learning habits.
• High ethical standards, curiosity, critical thinking and analytical skills.
• Excellent written and verbal English communication.
• Ability to work under pressure, meet tight deadlines and maintain confidentiality.

Required skills

• PenTest+ certification
• OSCP, OSWA or OSWE certification
• Knowledge of MITRE ATT&CK framework
• Understanding of the Cyber Kill Chain
• Familiarity with CVE, CWE, CVSS scoring
• Experience with penetration testing and security scanning tools
• Experience evaluating and deploying automated security testing solutions