Penetration Tester

Reply; Terni; On-site; EUR 45,000 - 65,000; Full time

Job summary

Spike Reply is seeking a security testing professional to evaluate networks, mobile and web apps, and embedded/IoT products, identifying vulnerabilities and simulating attacks for national and international clients.

You will conduct audits, code reviews, and red/purple team activities while delivering clear findings to client IT teams. Strong scripting (Python/C) and OS knowledge are required.

Qualifications

• Security testing across networks, mobile and web apps to identify vulnerabilities.
• Audit, code reviews and red/purple team activities with client-facing results.
• Effective report writing and communication to IT teams.

Responsibilities

• Perform security tests on Network infrastructures.
• Test Mobile Applications.
• Test Web Applications.
• Test Embedded/IoT products.
• Security audits and red/purple team exercises.
• Write security assessment reports.
• Communicate results to client IT teams.
• Scripting and programming (e.g., Python, C).
• Deep knowledge of Windows, Linux/Unix, Android, iOS, MacOS.
• Knowledge of OWASP and networking concepts.

Skills

Security testing

Network security

OWASP

Python

C

Linux/Unix

Windows

Embedded/IoT

Web applications

Mobile security

Communication

Teamwork

English

Job description

In this role you will perform security testing across networks, mobile and web applications, and embedded/IoT products to identify vulnerabilities and simulate attacks. You will join Spike Reply's Cyber Security Team, serving national and international clients and addressing challenging security problems. You will go beyond automated tools, conducting audits, code reviews, and red/purple team activities while communicating findings to client IT teams. This is a forward‑thinking, technology‑driven opportunity with real impact on client security.

• Perform security tests on Network Infrastructures
• Test Mobile Applications
• Test Web Applications
• Test Embedded/IoT products
• Security audit
• Red/Purple Team
• Write security assessment reports
• Communicate results to IT team
• Scripting and programming (e.g., Python, C)
• Deep knowledge of Windows, Linux/Unix, Android, iOS, MacOS
• Knowledge of OWASP
• Knowledge of networking concepts (protocols, routing)
• Good presentation and communication skills, teamwork and flexibility
• English language (oral and written)
• Good presentation and communication skills
• aptitude to teamwork
• flexibility
• Scripting and programming (e.g., Python, C)
• Deep knowledge of operating systems (Windows, Linux/Unix, Android, iOS, MacOS)
• OWASP