Lead Penetration Tester – Web Apps & API (Remote)

People More; Kraków; Presencial; PLN 117.000 - 152.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private medical care

Sports card

Training courses

Remote work

Small team

International projects

Descripción de la vacante

People More in Kraków (remote-friendly) seeks a senior Penetration Tester for WebAPP/API engagements. You will lead end-to-end pentests, covering web/API, network, mobile, and AD testing, and develop PoCs in Python/PowerShell/Bash.

You’ll communicate risks to technical and non-technical stakeholders and guide remediation with clients. Join a small, international team offering remote work options, private medical care, a sports card, training courses, and a collaborative environment where

Formación

• 4+ years hands-on offensive security in multi-client environments.
• Expertise in web/API, network, mobile, or Active Directory testing.
• Lead penetration testing engagements end-to-end.
• Proficient with Burp Suite, Nmap, Metasploit, BloodHound, Impacket, NetExec, Cobalt Strike, Frida.
• Experience scripting PoCs in Python/PowerShell/Bash.
• Strong client-facing, reporting and stakeholder communication skills.
• At least one cert: OSCP/CRTP/CRTO/CREST CRT/CPSA/CCT App/CCT Infra.
• Fluent English and Polish.

Responsabilidades

• Lead end-to-end penetration tests and remediation retests.
• Perform advanced AD assessments including privilege escalation and lateral movement.
• Develop custom scripts and PoC exploits in Python/PowerShell/Bash.
• Manage engagements from scoping/estimation to reporting.
• Review findings and support pre-sales activities.
• Communicate risks and recommendations to stakeholders.

Conocimientos

Penetration testing leadership

Client communication

Technical reporting

Educación

OSCP

CRTP

CRTO

CREST CRT

CPSA

CCT App

CCT Infra

Herramientas

Burp Suite

Nmap

Metasploit

BloodHound

Impacket

NetExec

Cobalt Strike

Frida

Descripción del empleo

People More in Kraków (remote-friendly) seeks a senior Penetration Tester for WebAPP/API engagements. You will lead end-to-end pentests, covering web/API, network, mobile, and AD testing, and develop PoCs in Python/PowerShell/Bash.

You’ll communicate risks to technical and non-technical stakeholders and guide remediation with clients. Join a small, international team offering remote work options, private medical care, a sports card, training courses, and a collaborative environment where