Senior Pentester (Security Engineer)

DEVTALENTS Sp. z o.o.; Województwo mazowieckie; On-site; PLN 80,000 - 100,000; Full time

Benefits offered by this job

Influence over security architecture

Supportive culture for professional growth

Job summary

DEVTALENTS Sp. z o.o. in Poland is seeking a Senior Pentester (Security Engineer) to drive the development of security solutions. Your role involves conducting in-depth penetration tests, overseeing bug bounty submissions, and creating tools for performance tracking.

The ideal candidate will possess strong expertise in Java, Node.js, AWS, and Python, alongside communication skills to convey complex findings to diverse stakeholders. Join a supportive culture that fosters professional growth and innovation.

Qualifications

• Proven track record in penetration testing and security evaluations.
• Exceptional communication skills for conveying technical findings.
• Active participation in CTFs and the cybersecurity community.

Responsibilities

• Conduct in-depth penetration tests on applications and services.
• Oversee bug bounty submissions and analyze findings.
• Create tools for metrics and performance tracking.
• Promote security principles through workshops and training.

Skills

Penetration testing

Vulnerability assessment

Java

Node.js

AWS

Python scripting

Security certifications (OSCP, OSWE, etc.)

Education

Higher education in Computer Science or related

Job description

We are looking for a Senior Pentester (Security Engineer) to be part of the DEVTALENTS team and contribute to the development of solutions for businesses worldwide.

Your Role:

• Conduct in-depth penetration tests (white-box and black-box) on both internal and customer-facing applications, services, and infrastructure.
• Oversee, prioritize, and analyze bug bounty submissions, as well as findings from external penetration tests.
• Perform variant analysis on disclosed vulnerabilities across multiple platforms and frameworks.
• Investigate and review third-party solutions to ensure they meet our security standards.
• Create and refine tools for reconnaissance, process automation, and ongoing metrics and performance tracking.
• Offer expert advice to engineering and security operations teams, providing clear remediation strategies and deeper insight into identified issues.
• Promote offensive security principles by hosting demos, workshops, and training sessions, building a stronger security-minded culture.
• Evaluate our technology stack through the most effective methods available, adapting your approach as the environment evolves.
• Determine priorities and focus areas to maximize value and impact.
• Contribute significantly to the ongoing development and maturity of our security program.

Technical Expertise:

• Proven track record in penetration testing, vulnerability assessment, and other technical security evaluations.
• Strong ability to find, understand, and articulate security flaws in code, particularly in Java and Node.js environments.
• Hands‑on experience with cloud infrastructures, especially AWS, and familiarity with modern microservice‑oriented architectures.
• Exceptional communication skills, capable of clearly conveying findings and suggesting pragmatic, targeted improvements rather than merely reporting issues.
• Comfortable scripting in Python and contributing to more extensive security tooling or automation projects.
• Self‑driven, with the initiative to spearhead projects that strengthen the broader security culture and foundations.
• Hold one or more reputable industry certifications (e.g., OSCP, OSWE, CREST, GIAC, AWS certifications).
• Active participant in CTFs and the broader cybersecurity community, staying current on emerging threats and best practices.
• Higher education with a profile in Computer Science or related.
• English level min. B2.

Mindset & Approach:

• Strong communication skills, capable of translating complex cybersecurity concepts into understandable terms for technical and non-technical stakeholders.
• A collaborative spirit, thriving in cross‑functional, agile environments, and eager to mentor and guide team members.
• A desire to stay ahead of industry trends, experiment with new technologies, and drive innovation in cybersecurity practices.

What We Offer:

• Influence over security architecture and platform decisions, playing a key role in shaping our cybersecurity strategy.
• A transparent, supportive culture that fosters professional growth, learning, and innovation.