Lead Penetration Tester, Offensive Security Engineer

Procter & Gamble; Poland; On-site; PLN 180,000 - 260,000; Full time

Job summary

Procter & Gamble is seeking a security-minded professional to lead defined-scope penetration tests across websites, services, APIs, cloud environments, and more from Warsaw. You will collaborate with intake management, testers, and stakeholders to align objectives and engagement rules, then execute recon, exploitation, reporting, and remediation validation.

You should have 2+ years in penetration testing or application security, strong scripting skills, and hands-on cloud experience.

Qualifications

• Bachelor's degree (or 2+ years of relevant experience) in information security, cybersecurity, CS, or related field.
• 2+ years in penetration testing or application security testing.
• Ability to lead defined-scope penetration tests and document results clearly.
• Experience in 2+ domains (web, APIs, mobile, cloud, etc.).
• Scripting ability in Python/PowerShell/Bash/Go/JS.
• Basic Linux and Windows familiarity.
• Understanding code to identify security logic.
• Experience with cloud providers (GCP, AWS, Azure).

Responsibilities

• Lead defined-scope penetration tests across websites, services, APIs, and cloud environments.
• Collaborate with intake management and stakeholders to set objectives and rules.
• Execute recon, vulnerability discovery, exploitation, reporting, and remediation validation.
• Identify and document security vulnerabilities within engagement scope.
• Validate related vulnerabilities to demonstrate impact within engagement boundaries.
• Test for control gaps and document weaknesses.
• Investigate Vulnerability Disclosure Program findings and escalate as needed.
• Work with engineering, product, cloud, and security teams to explain findings and support remediation.
• Use scripts, templates, automation, and AI-assisted workflows to improve efficiency.
• Assist testing AI-enabled apps for risks such as prompt injection and data exposure.
• Produce clear reports with steps, evidence, impact, affected systems, remediation guidance.
• Contribute to knowledge sharing and process improvements.

Skills

Penetration testing

Application security

Scripting (Python/PowerShell)

Cloud platforms (AWS/Azure/GCP)

Linux command line

Communication skills

Education

Bachelor's degree in Information Security or related field

2+ years of relevant experience

Tools

Burp Suite

Nmap

Ghidra

Metasploit

Job description

Procter & Gamble is seeking a security-minded professional to lead defined-scope penetration tests across websites, services, APIs, cloud environments, and more from Warsaw. You will collaborate with intake management, testers, and stakeholders to align objectives and engagement rules, then execute recon, exploitation, reporting, and remediation validation.

You should have 2+ years in penetration testing or application security, strong scripting skills, and hands-on cloud experience.