Penetration Tester - WebAPP and API

your Jared; Kraków; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Private medical care

Sports card

Training courses

Remote work

Office in Krakow

Job summary

People More in Kraków / remote is seeking a seasoned Penetration Tester for WebAPP and API projects. You will lead end-to-end engagements, assess web, API, network, and Active Directory environments, and communicate risks to diverse stakeholders.

You will develop PoC exploits in Python/PowerShell/Bash, create clear reports, and help shape client solutions. English and Polish proficiency are required; remote work is fully supported.

Qualifications

• 4+ years of hands-on offensive security experience in consultancy or multi-client env.
• Expertise in web/API, network, mobile, or Active Directory testing.
• Ability to independently lead engagements—from scoping to reporting.
• Experience developing PoC exploits with Python/PowerShell/Bash.
• Strong client-facing, reporting, and stakeholder communication skills.
• At least one listed certification (OSCP, CRTP, CRTO, CREST CRT, CPSA, CCT App/Infra).
• Very good English and Polish.

Responsibilities

• Lead end-to-end penetration tests and remediation retests.
• Develop custom scripts and PoC exploits using Python, PowerShell, or Bash.
• Manage engagements from scoping and estimation to reporting.
• Review technical findings and support pre-sales activities.
• Communicate risks and recommendations to technical and non-technical stakeholders.

Skills

Penetration testing

Client-facing

Technical reporting

Stakeholder communication

Python scripting

Education

OSCP

CRTP

CRTO

CREST CRT

CPSA

CCT App

CCT Infra

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Impacket

NetExec

Cobalt Strike

Frida

Job description

Penetration Tester - WebAPP and API

Kraków / remote

back

Penetration Tester - WebAPP and API

Kraków / remote

Hello,
We are called People More because we treat our employees with respect, but also because the projects we work on are for people and should be easy and pleasant to use. We are technological, but we look at the bigger picture :)
The company is made up of people with a huge client base in the country and abroad, for whom we build projects from scratch (UX, UI, frontend, backend, mobile) or in part. We work directly for our clients and also support our partners in their own solutions. This ensures a wide range of projects and the ability to change! We work with clients all over the world.
For the project that we are working on with our partner, we are looking for Penetration Tester - WebAPP and API.

Your duties will include:

• Lead end-to-end penetration tests and remediation retests.
• Perform advanced Active Directory assessments, including privilege escalation, lateral movement, and attack path analysis.
• Develop custom scripts and PoC exploits using Python, PowerShell, or Bash.
• Manage engagements from scoping and estimation to reporting.
• Review technical findings and support pre-sales activities.
• Communicate risks and recommendations to technical and non-technical stakeholders.

Requirements that must be met:

• 4+ years of hands‑on offensive security experience, preferably in a cybersecurity consultancy or multi-client environment.
• Strong expertise in at least three areas: web/API, network, mobile, or Active Directory testing.
• Ability to independently lead penetration testing engagements—from scoping and estimation to reporting and remediation retesting.
• Advanced proficiency with tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, NetExec, Cobalt Strike, and Frida.
• Experience developing scripts and PoC exploits using Python, PowerShell, or Bash.
• Strong client‑facing, technical reporting, and stakeholder communication skills.
• At least one certification: OSCP, CRTP, CRTO, CREST CRT, CPSA, CCT App, or CCT Infra.
• Very good English and Polish

What we offer:

• We are open and honest and we solve problems instead of generating them.
• Maybe it’s obvious, but we really respect our employees and associates. We used to be software developers, too, and we appreciate that job!
• A small team
• An international working environment and international projects
• Private medical care
• Sports card
• Training courses
• Work that is 100% remote (unless you prefer another system)

We have an office in Krakow, but if you like to work remotely, that’s absolutely fine. We are OK with fully remote work. For us, you can be located anywhere. :)

Why it’s a good idea to work with People More?

• If you are not satisfied with your work or your tasks, we’ll find a way out together!
• If you get bored, we will offer you a new product and new, fascinating tasks
• We will work on your brand together: you will get an opportunity to attend conferences, including as a speaker, and we will help you publish in recognized magazines and online
• We will facilitate your access to challenges that are usually difficult to get
• At any time, you can talk directly to the board of People More—we talk your language because the company’s founders are software developers and designers!

What does the recruitment process look like?

• A friendly remote initial interview
• A remote technical talk
• The decision to work together!

A friendly initial interview

[REMOTELY]

A technical talk

The decision to work together!

[POSITIVELY :)]