Senior Penetration Tester: Cloud, Web & API Security

Alldus; Dublin; On-site; EUR 110,000 - 150,000; Full time

Job summary

Alldus is seeking an experienced Penetration Tester to join a cyber security team on a six-month contract. The role focuses on hands-on testing across web applications, APIs, cloud environments, and infrastructure, with exposure to Azure, AWS, Kubernetes, and CI/CD.

You will identify and document vulnerabilities, produce detailed reports, and work with Dev and Security teams to drive remediation and retesting, while supporting broader vulnerability management initiatives.

Qualifications

• 5+ years of hands-on penetration testing experience.
• Strong web app and API testing capabilities.
• Experience with Azure and/or AWS environments.
• Knowledge of Kubernetes, containers and CI/CD security.
• Solid understanding of OWASP and attack methodologies.
• Experience producing technical reports for stakeholders.

Responsibilities

• Conduct penetration testing across web apps, APIs, cloud and infrastructure.
• Identify, exploit and document vulnerabilities with remediation guidance.
• Perform security testing in Azure/AWS, Kubernetes, and CI/CD environments.
• Produce detailed testing reports and present findings to stakeholders.
• Collaborate with development and security teams to support remediation and retesting.
• Support wider cyber security and vulnerability management activities as required.

Skills

Web/API pentesting

Cloud security

Stakeholder comms

Independent worker

Education

OSCP/CREST/OSWE certs

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

Alldus is seeking an experienced Penetration Tester to join a cyber security team on a six-month contract. The role focuses on hands-on testing across web applications, APIs, cloud environments, and infrastructure, with exposure to Azure, AWS, Kubernetes, and CI/CD.

You will identify and document vulnerabilities, produce detailed reports, and work with Dev and Security teams to drive remediation and retesting, while supporting broader vulnerability management initiatives.