Penetration Testing Engineer/ 1

Inetum; Warszawa; Hybride; PLN 190 000 - 270 000; Plein temps

Avantages offerts par ce poste

Fully funded training and certificates

Participation in technology and confer

Cafeteria system

Referral bonuses up to PLN 6,000

Revenue sharing opportunities

Hybrid work model (3 days office, 2 at

Dedicated Team Manager and mentoring

Team events budget

Résumé du poste

Inetum Polska Sp. z o.o. poszukuje doświadczonego Senior IT Support Engineer z specjalizacją w Offensive Security do zespołu Bezpieczeństwa Informacji.

Osoba ta będzie prowadzić testy penetracyjne, oceny bezpieczeństwa i audyty infrastruktury w różnych środowiskach, identyfikować słabe punkty oraz planować działania naprawcze. Wymagane jest kilkuletnie doświadczenie w security, praktyczna znajomość AD/Microsoft Entra ID, chmury (OpenStack, Kubernetes, AWS, Azure) oraz umiejętność raportowania do

Qualifications

• Stopień naukowy w dziedzinie informatyki, bezpieczeństwa IT lub porównywalne kwalifikacje.
• Wieloletnie doświadczenie w Information Security, Offensive Security, Penetration Testing lub Red Teaming.
• Praktyczne doświadczenie w testach penetracyjnych w heterogenicznych środowiskach przedsiębiorstw.
• Doświadczenie w zabezpieczeniach Active Directory/Microsoft Entra ID, Windows i Linux.
• Doświadczenie w testach bezpieczeństwa aplikacji webowych i API.
• Doświadczenie z bezpieczeństwem chmury (OpenStack, Kubernetes, AWS, Azure).
• Dobre umiejętności raportowania i prezentowania wyników.

Responsabilités

• Prowadzenie testów penetracyjnych wewnętrznej infrastruktury, środowisk i aplikacji webowych dostępnych z Internetu.
• Ocena bezpieczeństwa autoryzacji, uwierzytelniania i logiki biznesowej; testy API.
• Przygotowywanie raportów z wynikami, ocen ryzyka i zaleceń naprawczych dla interesariuszy.
• Prowadzenie i analiza red teamów wewnętrznych oraz symulowanie realistycznych ataków.
• Wspieranie działań naprawczych i projektów związanych z architekturą bezpieczeństwa.
• Tworzenie i rozwijanie metodologii testów oraz automatyzacji.
• Wspieranie zgodności z ISO 27001, NIS2 i innymi ramami bezpieczeństwa.

Connaissances

Offensive Security

Penetration Testing

Red Teaming

Security Assessments

Security Reporting

Collaboration

Formation

Degree in Computer Science, IT Security, or comparable qualification

Outils

OpenStack

Kubernetes

AWS

Azure

Microsoft Entra ID

Active Directory

Windows

Linux

Web Applications

APIs

Description du poste

Opis firmy

Inetum Polska is part of the global Inetum Group and plays a key role in driving the digital transformation of businesses and public institutions. Operating in cities such as Warsaw, Poznan, Katowice, Lublin, Rzeszow, Lodz the company offers a wide range of IT services. Inetum Polska actively supports employee development by fully funding training, certifications, and participation in technology conferences. Additionally, the company is involved in local social initiatives, such as charitable projects and promoting an active lifestyle. It prides itself on fostering a diverse and inclusive work environment, ensuring equal opportunities for all.

Globally, Inetum operates in 19 countries and employs over 28,000 professionals. The company focuses on four key areas:

• Consulting (Inetum Consulting): Strategic advisory services that help organizations define and implement innovative solutions.
• Infrastructure and Application Management (Inetum Technologies): Designing and managing IT systems tailored to clients’ individual needs.
• Software Implementation (Inetum Solutions): Deploying partner solutions from industry leaders like Microsoft, SAP, Salesforce, and ServiceNow.
• Custom Software Development (Inetum Software): Creating unique software solutions to meet specific client needs.

With strategic partnerships with major technology giants, including Microsoft, SAP, Salesforce, and ServiceNow, Inetum delivers advanced technological solutions tailored to customer requirements. In 2023, Inetum reported revenues of €2.5 billion, underscoring its strong position in the digital services market.

Flexible And Hybrid Work

Inetum distinguishes itself by offering a comprehensive range of benefits that meet the diverse needs of employees, providing flexibility, support and commitment. Here's what makes working at Inetum unique:

• Flexible working hours.
• Hybrid work model, allowing employees to divide their time between home and modern offices in key Polish cities.

Attractive Financial Benefits

• A cafeteria system that allows employees to personalize benefits by choosing from a variety of options.
• Generous referral bonuses, offering up to PLN6,000 for referring specialists.
• Additional revenue sharing opportunities for initiating partnerships with new clients.

Professional Development And Team Support

• Ongoing guidance from a dedicated Team Manager for each employee.
• Tailored technical mentoring from an assigned technical leader, depending on individual expertise and project needs.

Community And Well-Being

• Dedicated team-building budget for online and on-site team events.
• Opportunities to participate in charitable initiatives and local sports programs.
• A supportive and inclusive work culture with an emphasis on diversity and mutual respect.

Opis oferty pracy

We are seeking a highly skilled and experienced Senior IT Support Engineer specializing in Offensive Security to join Information Security team. The ideal candidate will have a strong background in penetration testing, security assessments, and infrastructure security audits. This role involves identifying architectural weaknesses, planning and executing penetration tests, and conducting comprehensive security reviews across various environments.

Key Responsibilities

• Penetration Testing & Security Assessments:
  • Conduct penetration tests of internal infrastructure, environments, and Internet-facing web applications.
  • Perform authentication, authorization, business logic, and API security assessments.
  • Identify, validate, and document security vulnerabilities based on industry standards such as OWASP Top 10 and MITRE ATT&CK.
• Infrastructure Security Audits:
  • Assess network, system, and application security controls.
  • Conduct security reviews of cloud-native and distributed architectures, in-house cloud architectures, and physical security of company sites.
  • Audit complex enterprise infrastructures including Kubernetes environments, OpenStack platforms, Apache Kafka ecosystems, Active Directory, Microsoft Entra ID, WAN and LAN network infrastructures, Linux and Windows server environments, and hybrid cloud and on-premise architectures.
• Reporting & Documentation:
  • Report and present findings, risk assessments, and remediation recommendations to technical and management stakeholders.
  • Document penetration tests, security assessments, and audit results.
• Red Team Engagements:
  • Plan and execute internal red team engagements simulating realistic threat actor behavior.
  • Conduct attack path analysis, privilege escalation assessments, social engineering, credential compromise, and lateral movement scenarios.
• Security Improvement & Collaboration:
  • Support remediation activities and security architecture improvements.
  • Collaborate with system owners, platform teams, and developers to address identified weaknesses.
  • Participate in security architecture reviews and technical design discussions.
  • Work closely with IT, network, and application teams to identify security gaps and recommend improvements.
• Methodology & Tooling Development:
  • Develop and maintain testing methodologies, attack playbooks, and automation scripts.
  • Contribute to the continuous improvement of offensive security capabilities and tooling.
• Compliance & Awareness:
  • Support compliance requirements such as ISO 27001, NIS2, and industry-specific security frameworks.
  • Provide technical expertise for security-related projects and initiatives.
  • Contribute to security awareness by sharing attack techniques, lessons learned, and best practices

Kwalifikacje

• Degree in Computer Science, IT Security, or a comparable qualification.
• Several years of experience in Information Security, Offensive Security, Penetration Testing, or Red Teaming.
• Hands-on experience conducting penetration tests against heterogeneous Enterprise Infrastructure environments, including:
  • Active Directory Security/Microsoft Entra ID
  • Network - LAN/WAN/WLAN
  • Windows, Mac, and Linux
  • Web Applications (In-House and public-facing)
  • APIs
  • (In-House) Cloud Security (OpenStack, Kubernetes, containerized environments)
  • Cloud Security (AWS, Azure, M365)
• Strong understanding of modern attack techniques and adversary tactics.
• Practical knowledge of common penetration testing methodologies and frameworks.
• Strong analytical skills and problem-solving abilities.
• Experience creating technical reports and presenting findings to stakeholders.
• Team player with good communication skills.

Dodatkowe informacje

Hybrid work model: 3 days from the office, 2 days of home office.

Office locations: Warszawa, Poznan, Lublin

During employment, we conduct a background check

Fluent communication skills in English and Polish (minimum B2 level), both written and spoken.

We Hereby Inform You That Inetum Polska Sp. z O.o. Has Implemented An Internal Reporting (whistleblowing) Procedure. The Content Of The Procedure And The Possibility To Submit An Internal Report Are Available At

https://inetum.whispli.com/speakup?locale=pl