Penetration Testing Analyst | Web & API Security Expert

Sun Life; Dublin; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Fitness reimbursement

Annual leave 22-25 days

Annual bonus plan

Pension scheme

Study assistance programme

Wellness programme

Job summary

Sun Life in Ireland seeks a skilled Penetration Testing Analyst to perform hands-on security testing of applications, infrastructure, and systems. You will focus on penetration testing with exposure to Red Team activities and contribute to adversary simulation exercises where required.

The successful candidate will have strong technical testing capabilities, experience with OWASP, and a drive to develop broader offensive security skills within a collaborative team.

Qualifications

• 2+ years of hands-on professional experience in web, API, and infrastructure testing.
• Solid understanding of authentication, session management, and access control flaws.
• Experience with Burp Suite, Nmap, sqlmap or similar.

Responsibilities

• Conduct web, API, mobile and infrastructure penetration testing across enterprise applications.
• Identify, exploit, and validate vulnerabilities with manual testing techniques.
• Document findings with risk ratings and practical remediation recommendations.
• Produce reports aligned with OWASP and established security frameworks.
• Support red team exercises and adversary simulations when required.
• Map attack surfaces and identify potential attack paths.
• Collaborate with senior team members on attacker techniques.

Skills

Penetration testing

Web/API testing

Manual testing

Documentation

Red Team

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Burp Suite

Nmap

sqlmap

Job description

Sun Life in Ireland seeks a skilled Penetration Testing Analyst to perform hands-on security testing of applications, infrastructure, and systems. You will focus on penetration testing with exposure to Red Team activities and contribute to adversary simulation exercises where required.

The successful candidate will have strong technical testing capabilities, experience with OWASP, and a drive to develop broader offensive security skills within a collaborative team.