Senior Penetration Tester – Web & Infra Security (Remote)

ThyssenKrupp Presta AG; Województwo pomorskie; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Sports cards and wellness benefits

MyBenefit platform

Private medical care

Life insurance

glasses co-financing

Job summary

thyssenkrupp IT Competence Center seeks a skilled security tester to identify vulnerabilities in web applications and infrastructure, and to mentor junior staff. You will interact with clients to define test requirements, contribute to testing methodologies, and develop scripts for penetration testing.

The role requires 3+ years in penetration testing, strong knowledge of OWASP guidelines, and proficiency with tools like Burp Suite, Metasploit, Nessus and Wireshark.

Qualifications

• Degree in Computer Science (or equivalent practical qualification) with at least 3 years of hands-on experience in web application and infrastructure penetration testing.
• Proven track record in red teaming, source code review, and in-depth knowledge of the OWASP Testing Guide (e.g., XSS, CSRF, session management).
• Proficiency with standard industry tools (Burp Suite, Metasploit, Nessus, Wireshark, Bettercap) and scripting capabilities (Python, Bash, Ruby).
• Strong critical thinking and problem-solving skills, with the ability to analyze complex datasets and extract actionable security findings.
• Professional working proficiency (written and spoken) in English. German would be a plus.
• Experience assessing AI-based applications or utilizing AI-driven offensive security tooling would be a plus.

Responsibilities

• Identifying and investigating security vulnerabilities at thyssenkrupp
• Interacting with clients to determine their requirements for the tests
• Contributing to penetration testing methods, scripts and tests
• Supporting the vulnerability management and other security-related projects
• Creating reports and recommendations from findings
• Mentoring and supporting less experienced resources

Skills

Red teaming

OWASP Testing Guide

Burp Suite

Metasploit

Nessus

Wireshark

Python

Bash

Ruby

English proficiency

German a plus

AI security experience

Education

Degree in Computer Science (or equivalent practical qualification)

Tools

Burp Suite

Metasploit

Nessus

Wireshark

Bettercap

Job description

thyssenkrupp IT Competence Center seeks a skilled security tester to identify vulnerabilities in web applications and infrastructure, and to mentor junior staff. You will interact with clients to define test requirements, contribute to testing methodologies, and develop scripts for penetration testing.

The role requires 3+ years in penetration testing, strong knowledge of OWASP guidelines, and proficiency with tools like Burp Suite, Metasploit, Nessus and Wireshark.