Lead Penetration Tester (Web+Networking) IRC306780

GlobalLogic Latinoamérica; Polska; On-site; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Career development

Diversity & Inclusion

Relocation opportunities

Job summary

GlobalLogic is seeking an expert Penetration Testing Engineer to drive offensive security across applications, networks, OT, and cloud environments. You will perform complex tests, simulate threats, and work with engineering to remediate critical vulnerabilities.

Role demands leading security projects, mentoring engineers, and delivering clear risk reports to executives. The team emphasizes scalable testing and automation within a global technology group.

Qualifications

• Hands-on penetration testing, vulnerability research, or red teaming with project leadership experience.

Responsibilities

• Lead end-to-end penetration testing across web, mobile, cloud, APIs, OT, and networking.

Skills

Offensive security

Web testing

OWASP Top 10

API security

Red Teaming

Cloud security

Container security

Python scripting

Report writing

Executive communication

Leadership

Education

Bachelor's degree in CS/IT

Tools

Burp Suite Pro

Metasploit

Cobalt Strike

Nmap

Wireshark

BloodHound

Impacket

Job description

Function

IT, Telecom & Internet

Experience

5-10 years

Location

Poland

Skills

Application Security, Penetration Testing (PTES methodology), Penetration Testing and Reporting, Security

An enterprise technology group is building a dedicated security validation team focused on vulnerability assessment and security testing across the group’s products and systems. The team runs structured testing campaigns: penetration testing, vulnerability discovery and triage, secure code review, and building automated test suites to make the process repeatable at scale.

The team also gets early access to specialized AI models and evaluates how they can accelerate security testing – an area we’re actively investing in, though the core of the work remains hands‑on security engineering. Scope covers internal systems as well as business‑unit products across the group, agreed campaign by campaign. The team starts small and scales into a permanent capability

Requirements

Must-Have skills

• Technical Exploitation: Advanced expertise in web application testing (OWASP Top 10), API security testing, internal/external network exploitation, and privilege escalation techniques.
• Cloud & Infrastructure: In-depth knowledge of securing and exploiting major cloud providers (AWS, Azure, or GCP) and modern containerized environments (Docker, Kubernetes).
• Scripting & Development: Experience with scripting programming languages; Python is preferred
• Tool Mastery: Advanced usage of security assessment tools (Burp Suite Pro, Metasploit, Cobalt Strike, Nmap, Wireshark, BloodHound, Impacket, etc.).
• Protocols: Strong knowledge of Network protocols (e.g., TLS, mTLS), as well as OT domain protocols (e.g., Modbus, TRDP). Good Understanding of well-known protocols (e.g., OIDC, OAuth2.0)
• Risk & Reporting: Strong ability to write comprehensive, high-quality assessment reports and clearly communicate technical risk to executives and business leaders.
  Pen test planning: Experience in planning roadmaps for penetration tests and leading pen test teams

Requirements

• Experience: hands‑on experience in penetration testing, vulnerability research, or red teaming, with demonstrated experience leading security projects or teams.
• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Certifications (will be a plus): OSCP (Offensive Security Certified Professional) / OSWE / OSEP, GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), CISSP, or equivalent advanced security credential

Job responsibilities

Role Overview
We are seeking an expert Penetration Testing Engineer to drive our offensive security strategy and lead advanced security assessments across application, network, OT, and cloud environments. In this high-impact role, you will perform complex penetration tests, simulate sophisticated cyber threats (Red Teaming), and collaborate directly with engineering and product teams to remediate critical vulnerabilities.

Key Responsibilities

• Offensive Security Operations: Lead and execute end-to-end penetration testing across web applications, mobile platforms, cloud infrastructure (AWS/Azure/GCP), APIs, OT, and Networking
  Red Teaming & Threat Simulation: Plan and execute adversary simulation exercises: Threat Modeling (Attack Tree, STRIDE, etc.)
• Architecture & Code Review: Conduct secure code reviews and architectural security evaluations to identify logic flaws and design weaknesses early in the SDLC.
• Remediation & Collaboration: Partner with engineering, DevOps, and security teams to articulate risk severity and provide actionable, practical guidance for vulnerability remediation.
• Leadership & Mentorship: Guide, mentor, and elevate senior and junior engineers on the offensive security team; set quality standards for assessment scoping and report delivery.
• Tooling & Automation: Design, build, and maintain custom tools, scripts, and testing frameworks to enhance penetration testing efficiency.
• Executive Communication: Translate complex technical findings into clear, impactful executive summaries and risk reports for technical and non-technical stakeholders.

What we offer

Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting‑edge technologies. As a team, we engineer digital products that positively impact people’s lives.

Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well‑being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities: At GlobalLogic, we prioritize work‑life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.