Senior Offensive Security Tester - Cloud & APIs

Bosch; Aveiro; Hybrid; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Flexible work conditions

Hybrid work system

Training opportunities and certs

Health insurance

Job summary

Bosch Aveiro is seeking a Senior Penetration Tester to identify, assess, and mitigate security vulnerabilities across our digital ecosystem. You will lead tests of web apps, APIs, cloud environments, and backend architectures to help engineering teams build secure-by-design solutions.

You will collaborate with DevOps and development teams, conduct threat modeling, perform deep vulnerability analyses, and produce actionable reports with remediation guidance.

Qualifications

• Degree or equivalent practical experience in offensive security.
• 3+ years hands-on security assessment experience focusing on web apps, APIs, and cloud infra.
• Strong knowledge of OWASP Top 10, ASVS, WSTG, OAuth 2.0.

Responsibilities

• Plan, scope, and execute penetration tests on modern web apps, APIs, and cloud environments.
• Collaborate with development/DevOps to model threats and review architectures for secure-by-design.
• Perform manual and automated vulnerability analyses and produce remediation guidance.
• Develop testing scripts and explore AI-assisted offensive workflows to improve coverage.
• Translate risks into actionable reports for engineering teams.

Skills

Offensive security

Cloud security

Security tools

Scripting

English

Education

Degree in Computer Science or Cybersecurity

Tools

Burp Suite Pro

OWASP ZAP

Postman

Docker

Kubernetes

Job description

Bosch Aveiro is seeking a Senior Penetration Tester to identify, assess, and mitigate security vulnerabilities across our digital ecosystem. You will lead tests of web apps, APIs, cloud environments, and backend architectures to help engineering teams build secure-by-design solutions.

You will collaborate with DevOps and development teams, conduct threat modeling, perform deep vulnerability analyses, and produce actionable reports with remediation guidance.