Senior Penetration Tester – Web & Infra Security (Remote)

Thyssenkrupp; Województwo pomorskie; Híbrido; PLN 180.000 - 260.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Sports cards and wellness benefits

MyBenefit platform

Private medical care

Life insurance

glasses co-financing

Descripción de la vacante

thyssenkrupp IT Competence Center seeks a skilled security tester to identify vulnerabilities in web applications and infrastructure, and to mentor junior staff. You will interact with clients to define test requirements, contribute to testing methodologies, and develop scripts for penetration testing.

The role requires 3+ years in penetration testing, strong knowledge of OWASP guidelines, and proficiency with tools like Burp Suite, Metasploit, Nessus and Wireshark.

Formación

• Degree in Computer Science (or equivalent practical qualification) with at least 3 years of hands-on experience in web application and infrastructure penetration testing.
• Proven track record in red teaming, source code review, and in-depth knowledge of the OWASP Testing Guide (e.g., XSS, CSRF, session management).
• Proficiency with standard industry tools (Burp Suite, Metasploit, Nessus, Wireshark, Bettercap) and scripting capabilities (Python, Bash, Ruby).
• Strong critical thinking and problem-solving skills, with the ability to analyze complex datasets and extract actionable security findings.
• Professional working proficiency (written and spoken) in English. German would be a plus.
• Experience assessing AI-based applications or utilizing AI-driven offensive security tooling would be a plus.

Responsabilidades

• Identifying and investigating security vulnerabilities at thyssenkrupp
• Interacting with clients to determine their requirements for the tests
• Contributing to penetration testing methods, scripts and tests
• Supporting the vulnerability management and other security-related projects
• Creating reports and recommendations from findings
• Mentoring and supporting less experienced resources

Conocimientos

Red teaming

OWASP Testing Guide

Burp Suite

Metasploit

Nessus

Wireshark

Python

Bash

Ruby

English proficiency

German a plus

AI security experience

Educación

Degree in Computer Science (or equivalent practical qualification)

Herramientas

Burp Suite

Metasploit

Nessus

Wireshark

Bettercap

Descripción del empleo

Joining thyssenkrupp IT Competence Center, you will become a part of a team of dedicated professionals, who support and develop Global IT Applications and thyssenkrupp infrastructure worldwide. We promise to create an environment where each employee feels valued and our teams are driven by the group spirit. You will be equipped with all necessary tools, which will help you develop your full professional potential. You will be able to balance your private and professional life, staying in close contact with what really matters to you.

• Identifying and investigating security vulnerabilities at thyssenkrupp
• Interacting with clients to determine their requirements for the tests
• Contributing to penetration testing methods, scripts and tests
• Supporting the vulnerability management and other security-related projects
• Creating reports and recommendations from findings
• Mentoring and supporting less experienced resources

• Degree in Computer Science (or equivalent practical qualification) with at least 3 years of hands-on experience in web application and infrastructure penetration testing.
• Proven track record in red teaming, source code review, and in-depth knowledge of the OWASP Testing Guide (e.g., XSS, CSRF, session management).
• Proficiency with standard industry tools (Burp Suite, Metasploit, Nessus, Wireshark, Bettercap) and scripting capabilities (Python, Bash, Ruby).
• Strong critical thinking and problem-solving skills, with the ability to analyze complex datasets and extract actionable security findings.
• Professional working proficiency (written and spoken) in English. German would be a plus.
• Experience assessing AI-based applications or utilizing AI-driven offensive security tooling would be a plus.

• Attractive working conditions and social benefits: work in a big, international high-tech company, induction by a team of experienced professionals, sports cards (MultiSport & CityFit), MyBenefit platform, private medical care, life insurance, co-financing of glasses.
• Talent and development programs aimed at developing technical and soft skills: transparent career paths, training programs, access to training platforms, training budget, foreign languages classes.
• “Open door” culture - work in international environment, friendly working atmosphere: flexible working hours, possibility of remote work, tk Volunteer team, Sports Team, sports activities funded by company, relocation package (loaction: Gdańsk)