Senior Cybersecurity Penetration Tester (f/m/div.)

Bosch Home Comfort Portugal; Aveiro; Hybrid; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Health insurance

Hybrid work system

Free parking

Canteen

Job summary

Bosch Home Comfort Portugal is seeking a Senior Cybersecurity Penetration Tester to identify and mitigate security vulnerabilities across our digital ecosystem. You will lead complex evaluations of modern web applications, APIs, and cloud-native environments, guiding engineering teams to build secure-by-design solutions.

The role requires 3+ years of hands-on security assessment experience, strong English communication, and collaboration across cross-functional teams.

Qualifications

• Degree in Computer Science, Cybersecurity, IT, Software Engineering, or equivalent practical experience in offensive security.
• 3+ years hands-on security assessment experience focusing on web apps, APIs and cloud infra.
• English fluency and ability to present findings to technical and business stakeholders.

Responsibilities

• Plan, scope and execute penetration tests on modern web apps, backend microservices, APIs and cloud-native environments.
• Collaborate with DevOps to perform threat modeling and architecture reviews early in design phase.
• Produce high-quality technical reports with actionable remediation guidance for engineering teams.
• Develop and refine testing scripts; explore AI-assisted security testing and LLM-supported analyses.

Skills

Fluent English

Analytical problem solver

Cross-functional collaboration

Education

Degree in Computer Science, Cybersecurity, IT, or Software Engineering

Tools

Burp Suite Pro

OWASP ZAP

Postman

Python

Bash

Docker

Kubernetes

Job description

Senior Cybersecurity Penetration Tester (f/m/div.)

Work includes

• Bosch Location
• Aveiro
• Division
• Home Comfort
• Work Mode
• Hybrid
• Field of work
• Engineering
• Join as
• Professional
• Working time
• Full-time
• Contract Type
• According to Arrangement
• Compensation
• According to agreement

Job posted: 2026-10-09

JobID REF298130M

Tasks

As a Senior Penetration Tester, you will play a central role in identifying, assessing, and mitigating security vulnerabilities across our digital ecosystem. You will lead complex technical evaluations spanning modern web applications, backend architectures, APIs, and cloud-natives environments, helping engineering teams build resilient, secure-by-design solutions.

Your Contribution To Something Big

• Drive Offensive Security: Plan, scope, and execute comprehensive penetration tests on modern web applications, backend microservices, REST/GraphQL APIs, and cloud-native environments (AWS, Azure, or GCP).
• Threat Modeling & Architecture Review: Collaborate closely with development and DevOps teams early in the design phase to conduct threat modeling and review architectures, ensuring security is baked in from day one.
• Vulnerability Analysis & Exploitation: Perform deep-dive manual and automated vulnerability analyses, uncovering complex flaws like business logic bypasses, authorization failures, and server-side request forgeries.
• Technical Reporting & Remediation Guidance: Author high-quality, actionable technical reports that translate complex technical risks into clear business impacts, providing pragmatic remediation guidance to our engineering squads.
• Tooling & Innovation: Develop custom testing scripts and explore cutting-edge offensive workflows, including integrating AI-assisted security testing and LLM-augmented vulnerability analysis to maximize speed and coverage.

What Distinguishes You

Education

• Degree in Computer Science, Cybersecurity, IT, Software Engineering, or equivalent practical experience in offensive security.

Experience

• Hands‑on experience (ideally 3+ years) conducting technical security assessments, with a strong focus on web applications, APIs, and cloud infrastructure.

Know How

• Offensive Security Expertise: In-depth knowledge of backend technologies, secure protocols, and security standards (e.g., OWASP Top 10, ASVS, WSTG, OAuth 2.0).
• Cloud & Modern Tech: Solid familiarity with assessing cloud environments (AWS, Azure, or GCP), IAM configurations, container security (Docker, Kubernetes), and microservices.
• Tools & Scripting: High proficiency with industry-standard offensive tools (e.g., Burp Suite Pro, OWASP ZAP, Postman) combined with scripting skills (e.g., Python, Bash) to automate testing workflows.

Languages

• Excellent communication skills with fluency in English (written and spoken) to effectively present findings to both technical teams and business stakeholders.

Working Style and Methods

• An analytical and structured problem‑solver who enjoys working collaboratively across cross‑functional teams to build collective security resilience.

Personality

• A curious, continuous learner with a passion for offensive security, exploring new technologies, and a strong drive to mentor and share knowledge with others.

We Also Welcome (Preferred / Nice-to-have)

• Enthusiastic interest or experience in AI-driven offensive workflows (e.g., automated payload generation, LLM security evaluations).
• Industry certifications such as OSCP, OSWE, OSCE, CRTP, GWAPT, GPEN, or cloud-specific security certifications.
• Experience with source code reviews (SAST) in common modern languages (Java, Python, Go, TypeScript).

Benefits and Company Culture

• Flexible work conditions
• Hybrid work system
• Exchange with colleagues around the world
• Health insurance and medical office on site (general surgeon, psychology, physiotherapy, general clinic)
• Training opportunities (technical training, foreign languages training) & certifications
• Opportunities for career progression and continuous professional development
• Access to great discounts in partnerships and Bosch products
• Sports and health related activities
• Flexible benefits platform
• Free parking lot
• Canteen
• Free parking
• Supported employee car park on site
• Free bicycle parking in the courtyard
• Secure bicycle parking space for rent
• E‑bike charging stations
• Health Insurance
• Flexible and mobile working
• Flexitime and modern working time models ranging from part‑time to job sharing, home office and incorporated window days off
• Wide range of health and sports activities
• Training opportunities & Certifications
• Company doctor on site
• Occupational health care and counselling by internal medical staff, free vaccinations, attractive health insurance, psychosocial and therapeutic counselling, personal health care, workshops and lectures on the subject of health, company pension scheme from the 3rd year at Bosch
• Discounts for employees
• Discounted purchasing conditions with us and our partner companies, subsidised cultural and leisure events
• Catering facilities on site
• Healthy and tasty meals at subsidised prices in our company restaurant and cafeteria, free coffee in our coffee kitchens

Welcome to Aveiro

Aveiro, the city of sweet egg pastries and beautiful canal and sea sceneries, is the location of Bosch Home Comfort in Portugal. Joining more than 1500 associates in manufacturing and research and development of water heating solutions. We have the global competence centre for water heaters development in our site and an R&D engineering centre where we develop new and innovative solutions for our products. Working for global projects and gathering two Bosch divisions, in Aveiro also develop software solutions for our Mobility Aftermarket division.

Location benefits
Free Parking
Supported employee car park on site, free bicycle parking in the courtyard, secure bicycle parking space for rent, e-bike charging stations
Health Insurance
Flexible and mobile working
Flexitime and modern working time models ranging from part-time to job sharing, home office and incorporated window days off
Wide range of health and sports activities
Training opportunities & Certifications
Exchange with colleagues around the world
Company doctor on site
Occupational health care and counselling by internal medical staff, free vaccinations, attractive health insurance, psychosocial and therapeutic counselling, personal health care, workshops and lectures on the subject of health, company pension scheme from the 3rd year at Bosch
Discounts for employees
Discounted purchasing conditions with us and our partner companies, subsidised cultural and leisure events
Catering facilities on site
Healthy and tasty meals at subsidised prices in our company restaurant and cafeteria, free coffee in our coffee kitchens

Bosch is an employer that values diversity and equal opportunities. We welcome applications from people with disabilities and we can provide reasonable accommodations during the recruitment process and in the performance of professional activity. By including everyone and ensuring equal opportunities we unleash our full potential.