Penetration Tester

Andersen Lab; Osterreich; Hybrid; PEN 250,000 - 424,000; Full time

Benefits offered by this job

Remote/hybrid work options

Private health insurance

Sports compensation

Annual bonus up to 1000 EUR

Mentoring and adaptation program

Corporate training portal access

Job summary

Andersen Lab is seeking a seasoned Penetration Tester to strengthen cybersecurity across complex digital environments for international clients. The role focuses on identifying vulnerabilities, performing tests on web apps, APIs, networks, and cloud services, and guiding remediation efforts.

The ideal candidate has 5+ years in cybersecurity with 3+ years hands-on pentesting, strong OWASP knowledge, and hands-on certifications.

Qualifications

• 5+ years of cybersecurity experience, including 3+ years hands-on pentesting.
• Experience with web applications and APIs testing per OWASP Top 10/ASVS.
• Experience with internal and external infrastructure testing, including AD attacks.
• Proficiency with standard tools like Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket.
• Hands-on certifications: OSCP/OSWE/OSEP/CRTO/eWPTX/GPEN/GWAPT.
• Willingness to undergo background verification and clean records.
• English level: Upper-Intermediate or higher.

Responsibilities

• Plan and perform pentests of web apps, APIs, networks, Active Directory and cloud environments.
• Conduct manual testing beyond automated scans, including exploitation and privilege escalation.
• Validate findings, assess risk, and produce clear reports for technical and executive audiences.
• Present results to system owners and management and support remediation and retesting.
• Contribute to red/purple team exercises with SOC and detection teams.
• Maintain testing methodologies, tools, and templates.

Skills

Penetration testing

OWASP testing

Active Directory testing

Report writing

Cloud security basics

Education

OSCP/OSWE/OSEP/GPEN/GWAPT

Tools

Burp Suite Pro

Nmap

Metasploit

BloodHound

Impacket

Job description

This role is not available in your region. View other available roles .

Summary

Andersen is hiring a Penetration Tester for a project strengthening cybersecurity, identifying vulnerabilities, and mitigating security risks across complex digital environments.

Our customer is a technology and consulting organization providing digital infrastructure, cloud services, cybersecurity, data-driven solutions, and managed IT support. It helps organizations modernize complex technology environments, strengthen security, and improve the reliability and scalability of their digital operations. By combining technical expertise with modern technologies and service-oriented delivery, the company supports digital transformation, operational efficiency, and the continuous improvement of critical IT systems across multiple markets.

The project is focused on providing cybersecurity and digital services for international organizations within a large, heterogeneous, multi-tenant environment. It includes developing and strengthening vulnerability management capabilities to identify, assess, prioritize, and mitigate security risks across multiple organizations worldwide.

Responsibilities

• Planning and performing penetration tests of web applications, APIs, internal and external networks, Active Directory and cloud environments.
• Carrying out manual testing beyond automated scanning, including exploitation and privilege escalation within the agreed rules of engagement.
• Validating findings, assessing business risk and producing clear technical and executive reports.
• Presenting results to system owners and management, and supporting remediation and retesting.
• Contributing to red teaming or purple teaming exercises with SOC and detection teams.
• Maintaining testing methodologies, tools and templates.

Requirements

• Experience in cybersecurity for 5+ years, including 3+ years in hands-on penetration testing.
• Experience with web application and API testing according to OWASP (Top 10, WSTG, ASVS).
• Experience conducting internal and external infrastructure testing, including Active Directory attacks
• Working knowledge of standard tools (Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket, etc.).
• At least one recognized hands-on certification: OSCP, OSWE, OSEP, CRTO, eWPTX, GPEN or GWAPT.
• Clean professional records and willingness to undergo background verification.
• Level of English – from Upper-Intermediate and above.

Desired skills

• Hands-on experience with cloud penetration testing (Azure, Microsoft 365, AWS).
• Experience with mobile application testing (Android, iOS).
• Red Teaming or Purple Teaming experience, including familiarity with C2 frameworks.
• Strong scripting and security tooling skills (Python, PowerShell, Bash).
• Experience with PTES, OSSTMM or NIST SP 800-115 methodologies.
• Proven security research track record, such as published CVEs or recognized bug bounty findings.

Reasons to join us

• Experience in teamwork with leaders in FinTech, Healthcare, Retail, Telecom, and others. Andersen cooperates with such businesses as Samsung, Siemens, Johnson & Johnson, BNP Paribas, Ryanair, Mercedes, TUI, Verivox, Allianz, T-Systems, etc..
• The opportunity to change the project and/or develop expertise in an interesting business domain.
• Job conditions – you can work both fully remotely and from the office or can choose a hybrid variant.
• Guarantee of professional, financial, and career growth! The company has introduced systems of mentoring and adaptation for each new employee.
• The opportunity to earn up to an additional 1,000 EUR per month, depending on the level of expertise, which will be included in the annual bonus, by participating in the company's activities.
• Access to the corporate training portal, where the entire knowledge base of the company is collected and which is constantly updated.
• Referral program.
• Private health insurance and sports compensation, depending on the type of employment.

Locations

Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Hungary, Italy, Latvia, Lithuania, Luxembourg, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, The Netherlands

Thinking about your next career move? View Andersen’s vacancies and find yours today