Senior Penetration Tester - Web/API, Cloud (Remote/Hybrid)

Andersen; Kraków; Hybrid; PLN 120,000 - 240,000; Full time

Benefits offered by this job

Private health insurance

Annual bonus potential

Certification support

Referral program

Mentoring program

Job summary

Andersen is hiring a Penetration Tester to strengthen cybersecurity across complex digital environments, including web apps, APIs, networks, AD and cloud. The role involves identifying vulnerabilities, validating findings, and guiding remediation within a multi-tenant, international project.

You will perform manual testing beyond automated scans, report to stakeholders, and contribute to red/purple team activities while maintaining testing standards. Remote and hybrid options are available.

Qualifications

• 5+ years in cybersecurity, including 3+ years hands-on penetration testing.
• Experience testing web apps and APIs per OWASP guidelines.
• Experience with internal/external infrastructure testing, including AD attacks.
• Hands-on with standard pentest tools (Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket).
• At least one hands-on certification: OSCP, OSWE, OSEP, CRTO, eWPTX, GPEN or GWAPT.

Responsibilities

• Plan and perform penetration tests of web apps, APIs, networks, AD and cloud environments.
• Conduct manual testing beyond automated scans, including exploit and privilege escalation within scope.
• Validate findings and prepare clear technical and executive reports.
• Present results to system owners and management and support remediation/retesting.
• Contribute to red/purple team exercises with SOC and detection teams.
• Maintain testing methodologies, tools and templates.

Skills

Penetration testing

Web app testing

API testing

OSCP/OSWE/SEP etc

Tools

Burp Suite Pro

Nmap

Metasploit

BloodHound

Impacket

Job description

Andersen is hiring a Penetration Tester to strengthen cybersecurity across complex digital environments, including web apps, APIs, networks, AD and cloud. The role involves identifying vulnerabilities, validating findings, and guiding remediation within a multi-tenant, international project.

You will perform manual testing beyond automated scans, report to stakeholders, and contribute to red/purple team activities while maintaining testing standards. Remote and hybrid options are available.