Senior AppSec Penetration Tester & Security Advisor

itm8 PH; Region Hovedstaden; On-site; DKK 520,000 - 720,000; Full time

Benefits offered by this job

Competitive salary

Growth opportunities

Access to cybersecurity community

Job summary

itm8 is seeking an experienced Security Advisor (Penetration Tester) to own engagements from scoping to testing and debriefing, with strong web application security skills and an interest in expanding into mobile, AI, or mainframe security.

You will work independently across customer environments, explaining findings to developers and business stakeholders, and contribute to the team's technical development by sharing knowledge and mentoring colleagues.

Qualifications

• At least 3 years of AppSec cybersecurity consulting or working with software security.
• Proven track record in penetration testing, bug bounty or similar activities.
• Strong understanding of web vulnerabilities and exploitation across technologies.
• Experience documenting security findings and communicating remediation advice.
• Ability to perform onsite assignments in Zealand and Copenhagen area.
• Clean criminal record.
• Full working proficiency in English.

Responsibilities

• Identify complex vulnerabilities, develop exploitation chains, and demonstrate impact.
• Lead penetration testing engagements from scoping through testing and reporting.
• Communicate risks and business implications to management and executives.
• Assess and prioritise vulnerabilities based on business context and risk.
• Share knowledge and support junior colleagues.

Skills

Penetration testing

Web application security

AppSec consulting

Security reporting

Tools

Static analysis

Code review

Job description

itm8 is seeking an experienced Security Advisor (Penetration Tester) to own engagements from scoping to testing and debriefing, with strong web application security skills and an interest in expanding into mobile, AI, or mainframe security.

You will work independently across customer environments, explaining findings to developers and business stakeholders, and contribute to the team's technical development by sharing knowledge and mentoring colleagues.