Senior AppSec Penetration Tester

itm8 PH; Region Hovedstaden; On-site; DKK 520,000 - 720,000; Full time

Benefits offered by this job

Competitive salary

Growth opportunities

Access to cybersecurity community

Job summary

itm8 is seeking an experienced Security Advisor (Penetration Tester) to own engagements from scoping to testing and debriefing, with strong web application security skills and an interest in expanding into mobile, AI, or mainframe security.

You will work independently across customer environments, explaining findings to developers and business stakeholders, and contribute to the team's technical development by sharing knowledge and mentoring colleagues.

Qualifications

• At least 3 years of AppSec cybersecurity consulting or working with software security.
• Proven track record in penetration testing, bug bounty or similar activities.
• Strong understanding of web vulnerabilities and exploitation across technologies.
• Experience documenting security findings and communicating remediation advice.
• Ability to perform onsite assignments in Zealand and Copenhagen area.
• Clean criminal record.
• Full working proficiency in English.

Responsibilities

• Identify complex vulnerabilities, develop exploitation chains, and demonstrate impact.
• Lead penetration testing engagements from scoping through testing and reporting.
• Communicate risks and business implications to management and executives.
• Assess and prioritise vulnerabilities based on business context and risk.
• Share knowledge and support junior colleagues.

Skills

Penetration testing

Web application security

AppSec consulting

Security reporting

Tools

Static analysis

Code review

Job description

As one of the leading cybersecurity teams in Denmark, we are a highly skilled and passionate team dedicated to helping our customers protect their digital realms, by hacking their systems proving real exploitation and impact. Our team consists of experts who live and breathe for hacking, and the crew show great pride in keeping themselves cutting edge and up to date with emerging threats.

Your role

We are looking for an experienced penetration tester to join us as a Security Advisor, with strong practical skills in web application security and an interest in expanding into areas such as mobile, AI, or mainframe security.

You will own engagements from scoping through testing, reporting, and customer debriefing. You should be comfortable working independently, adapting to different customer environments, and explaining technical findings to both developers and business stakeholders.

You will also contribute to the team's technical development by sharing knowledge, reviewing findings, and supporting less experienced colleagues.

Key responsibilities

• Identify complex vulnerabilities, develop exploitation chains, and demonstrate their impact.
• Lead penetration testing engagements from scoping through testing, reporting, and customer debriefing.
• Communicate technical risks and their business implications to management and executive stakeholders.
• Assess and prioritise vulnerabilities based on business context and risk.
• Share knowledge about emerging threats and support the development of less experienced colleagues.

We are looking for a teamm8 who

• Has at least 3 years of AppSec cybersecurity consulting or working with software security.
• Has a proven track record in penetration testing, bug bounty or similar activities.
• Has a strong understanding of web vulnerabilities and exploitation across technologies.
• Has experience documenting security findings and communicating practical remediation advice.
• Is able to perform onsite assignments in the Zealand and Copenhagen area.
• Has a clean criminal record.
• Has full working proficiency in English.

Nice to have

• Relevant certifications such as: OSWE, eWPTX, CWEE, OSWA, eWPT, OSCP, CPTS or similar.
• Security research, whether formally published or conducted independently.
• Experience with static analysis and source code review.
• Experience with AI-enhanced penetration testing.
• Public CVEs or CTF placings.

What you get

• Competitive salary.
• Opportunities and budget for growth and learning.
• Access to a large group of colleges that only focus on cyber security.
• The opportunity to be part of a highly skilled and passionate cybersecurity team that takes pride in staying cutting edge and up to date with emerging threats.

We conduct interviews on an ongoing basis and will close the recruitment process as soon as we've found the right match. Please note that a criminal record check will be obtained prior to employment.

About itm8

We are itm8 - our customers' IT-mate.

1,600+ teammates across Denmark, Sweden, the Philippines, and the Czech Republic. With specialists in everything from IT security and ERP to AI and software development.

But what brings us together isn't just technology. It's PURPLE POWER - our way of working. Here, we help each other first, celebrate what works, and cut through the bullshit. We believe in ambition over the status quo. And that our differences make us stronger.

With us, it's not about being perfect. It's about taking responsibility, creating value, and growing - every day.

If you have questions about the position, you're always welcome to contact Christoffer Bech on email ( [e-mail] ) - we're here to help.