Senior Penetration Tester - Cloud & Payments Security Lead

LionHires Recruitment; Warszawa; On-site; PLN 260,000 - 380,000; Full time

Job summary

LionHires Recruitment partners with a tech company to recruit a Senior Penetration Tester who will spearhead end-to-end testing, lead red-team operations, and advise engineering and compliance teams on offensive security practices.

You will conduct testing across web, mobile, cloud, and networks (AWS), review Kubernetes and CI/CD pipelines, and mentor junior testers while translating findings into durable security controls.

Qualifications

• 4+ years of hands-on offensive security experience across web, cloud, or mobile.
• OSCP or equivalent certification required.
• Strong Python and Bash scripting for tooling and automation.

Responsibilities

• Lead end-to-end penetration testing engagements across web apps, mobile, networks and cloud (AWS).
• Run red-team and assumed-breach exercises to test detections and harden fraud stacks.
• Secure cloud-native architecture by reviewing Kubernetes workloads, CI/CD, and microservices.
• Collaborate with product, engineering, and AppSec to translate findings into durable controls and fixes.
• Develop custom scripts and tooling to close capability gaps and automate testing.
• Mentor mid-level and junior testers on engagement strategies and reporting.
• Stay ahead of threats by tracking CVEs, TTPs, and MITRE ATT&CK developments.

Skills

Penetration testing

Cloud security

Scripting (Python Bash)

Threat modeling

Compliance awareness

Education

OSCP

Tools

Terraform

Kubernetes

GitLab/GitHub Actions/Jenkins

Job description

LionHires Recruitment partners with a tech company to recruit a Senior Penetration Tester who will spearhead end-to-end testing, lead red-team operations, and advise engineering and compliance teams on offensive security practices.

You will conduct testing across web, mobile, cloud, and networks (AWS), review Kubernetes and CI/CD pipelines, and mentor junior testers while translating findings into durable security controls.