Lead Penetration Tester (Web+Networking)

Hitachi, Ltd.; Polonia; A distancia; PLN 180.000 - 300.000; Jornada completa

Descripción de la vacante

GlobalLogic is seeking an expert Penetration Testing Engineer to drive offensive security strategy across applications, networks, OT, and cloud environments. You will perform complex tests, lead red team activities, and collaborate with product teams to remediate critical vulnerabilities.

The role emphasizes mentoring and setting quality standards, with a focus on delivering executive-ready risk summaries and practical remediation guidance.

Formación

• Hands-on experience in penetration testing, vulnerability research, or red teaming.
• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• Certs like OSCP/OSWE/OSEP/GXPN/CISSP are a plus.

Responsabilidades

• Plan and execute end-to-end penetration tests across apps, networks, OT, and cloud.
• Lead Red Teaming exercises and threat simulations with engineering teams.
• Review code and architecture for security flaws early in SDLC.
• Communicate risk with actionable guidance for remediation.
• Mentor engineers and set quality standards for assessments.

Conocimientos

Web app testing (OWASP Top 10)

API security testing

Cloud security (AWS/Azure/GCP)

Container security (Docker/Kubernetes)

Python scripting

Security tooling (Burp Suite Pro, MetS

Educación

Bachelor's degree in CS/Cybersecurity/IT

Herramientas

Burp Suite Pro

Metasploit

Cobalt Strike

Nmap

Wireshark

BloodHound

Impacket

Descripción del empleo

Job Description

An enterprise technology group is building a dedicated security validation team focused on vulnerability assessment and security testing across the group's products and systems. The team runs structured testing campaigns: penetration testing, vulnerability discovery and triage, secure code review, and building automated test suites to make the process repeatable at scale.

The team also gets early access to specialized AI models and evaluates how they can accelerate security testing - an area we're actively investing in, though the core of the work remains hands‑on security engineering. Scope covers internal systems as well as business‑unit products across the group, agreed campaign by campaign. The team starts small and scales into a permanent capability

Requirements

Must‑Have skills

• Technical Exploitation: Advanced expertise in web application testing (OWASP Top 10), API security testing, internal/external network exploitation, and privilege escalation techniques.
• Cloud & Infrastructure: In‑depth knowledge of securing and exploiting major cloud providers (AWS, Azure, or GCP) and modern containerized environments (Docker, Kubernetes).
• Scripting & Development: Experience with scripting programming languages; Python is preferred
• Tool Mastery: Advanced usage of security assessment tools (Burp Suite Pro, Metasploit, Cobalt Strike, Nmap, Wireshark, BloodHound, Impacket, etc.).
• Protocols: Strong knowledge of Network protocols (e.g., TLS, mTLS), as well as OT domain protocols (e.g., Modbus, TRDP). Good Understanding of well‑known protocols (e.g., OIDC, OAuth2.0)
• Risk & Reporting: Strong ability to write comprehensive, high‑quality assessment reports and clearly communicate technical risk to executives and business leaders.
  Pen test planning: Experience in planning roadmaps for penetration tests and leading pen test teams

Requirements

• Experience: hands‑on experience in penetration testing, vulnerability research, or red teaming, with demonstrated experience leading security projects or teams.
• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Certifications (will be a plus): OSCP (Offensive Security Certified Professional) / OSWE / OSEP, GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), CISSP, or equivalent advanced security credential

Job Responsibilities

Role Overview
We are seeking an expert Penetration Testing Engineer to drive our offensive security strategy and lead advanced security assessments across application, network, OT, and cloud environments. In this high‑impact role, you will perform complex penetration tests, simulate sophisticated cyber threats (Red Teaming), and collaborate directly with engineering and product teams to remediate critical vulnerabilities.

Key Responsibilities

• Offensive Security Operations: Lead and execute end‑to‑end penetration testing across web applications, mobile platforms, cloud infrastructure (AWS/Azure/GCP), APIs, OT, and Networking
  Red Teaming & Threat Simulation: Plan and execute adversary simulation exercises: Threat Modeling (Attack Tree, STRIDE, etc.)
• Architecture & Code Review: Conduct secure code reviews and architectural security evaluations to identify logic flaws and design weaknesses early in the SDLC.
• Remediation & Collaboration: Partner with engineering, DevOps, and security teams to articulate risk severity and provide actionable, practical guidance for vulnerability remediation.
• Leadership & Mentorship: Guide, mentor, and elevate senior and junior engineers on the offensive security team; set quality standards for assessment scoping and report delivery.
• Tooling & Automation: Design, build, and maintain custom tools, scripts, and testing frameworks to enhance penetration testing efficiency.
• Executive Communication: Translate complex technical findings into clear, impactful executive summaries and risk reports for technical and non‑technical stakeholders.

What we offer

Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting‑edge technologies. As a team, we engineer digital products that positively impact people’s lives.

Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well‑being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities: At GlobalLogic, we prioritize work‑life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic is a full‑lifecycle product development services leader that combines chip‑to‑cloud software engineering expertise and vertical industry experience to help our customers design, build, and deliver their next‑generation products and digital experiences. We expertly integrate design, complex engineering, and agile delivery capabilities to deliver superior business outcomes for global brands in telecom, automotive, healthcare, technology, media and entertainment, manufacturing, and semiconductor industries.

Headquartered in Silicon Valley, GlobalLogic unites over 25,000 designers and engineers across the globe. Analysts like NASSCOM and Zinnov have recognized us for being a top company in our field, and we are consistently nominated as a preferred company by both global HR consulting firms and local boards. By creating an environment that is exciting and flexible, and by fostering growth through ongoing learning and development programs, we empower our consultants to achieve both their professional and personal goals.

At GlobalLogic, we make amazing products — and careers.