Senior Penetration Testing Engineer — Automation & Security

GlobalLogic; Kraków; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Comprehensive benefits

Relocation options

Rotation opportunities

Flexible work options

Job summary

GlobalLogic Krakow is seeking a Senior Penetration Testing Engineer to join a dedicated security validation team. You will perform hands-on testing across systems, conduct secure code reviews, and develop automated tests to scale security campaigns.

The role emphasizes documenting findings, triaging severities, and collaborating with teams to drive remediation while exploring AI-assisted approaches to security testing.

Qualifications

• Hands-on vulnerability assessment and penetration testing (web, API, network, or infrastructure).
• Secure code review experience.
• Solid coding skills (Python) for automation, tooling and test scripts.
• Experience writing automated tests and building repeatable test suites.
• Strong understanding of vulnerability classes (OWASP Top 10, CWE) and CVE/CVSS triage.

Responsibilities

• Perform vulnerability assessments and penetration testing against applications, services and infrastructure.
• Conduct secure code and configuration reviews.
• Triage and validate findings; assess severity, eliminate false positives, support remediation.
• Write and maintain automated security tests and tooling.
• Design test plans, execute testing campaigns, document and report results.
• Evaluate AI-assisted approaches to security testing and integrate what works into the workflow.

Skills

Penetration Testing

Vulnerability Assessment

Secure Coding

Automation with Python

OWASP Top 10

Tools

Burp Suite

Nmap

SAST/DAST scanners

Job description

GlobalLogic Krakow is seeking a Senior Penetration Testing Engineer to join a dedicated security validation team. You will perform hands-on testing across systems, conduct secure code reviews, and develop automated tests to scale security campaigns.

The role emphasizes documenting findings, triaging severities, and collaborating with teams to drive remediation while exploring AI-assisted approaches to security testing.