Lead Penetration Tester – Web Apps & API (Remote)

People More

Kraków

On-site

PLN 117,000 - 152,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Private medical care

Sports card

Training courses

Remote work

Small team

International projects

Job summary

People More in Kraków (remote-friendly) seeks a senior Penetration Tester for WebAPP/API engagements. You will lead end-to-end pentests, covering web/API, network, mobile, and AD testing, and develop PoCs in Python/PowerShell/Bash.

You’ll communicate risks to technical and non-technical stakeholders and guide remediation with clients. Join a small, international team offering remote work options, private medical care, a sports card, training courses, and a collaborative environment where

Qualifications

4+ years hands-on offensive security in multi-client environments.
Expertise in web/API, network, mobile, or Active Directory testing.
Lead penetration testing engagements end-to-end.
Proficient with Burp Suite, Nmap, Metasploit, BloodHound, Impacket, NetExec, Cobalt Strike, Frida.
Experience scripting PoCs in Python/PowerShell/Bash.
Strong client-facing, reporting and stakeholder communication skills.
At least one cert: OSCP/CRTP/CRTO/CREST CRT/CPSA/CCT App/CCT Infra.
Fluent English and Polish.

Responsibilities

Lead end-to-end penetration tests and remediation retests.
Perform advanced AD assessments including privilege escalation and lateral movement.
Develop custom scripts and PoC exploits in Python/PowerShell/Bash.
Manage engagements from scoping/estimation to reporting.
Review findings and support pre-sales activities.
Communicate risks and recommendations to stakeholders.