Senior Penetration Tester

HiQ; Stockholms kommun; On-site; SEK 600,000 - 800,000; Full time

Job summary

HiQ in Sweden is seeking an experienced penetration tester to join their Pentest team. The role involves performing hands-on penetration testing and contributing to security assessments for a variety of organizations. Candidates should have at least 5 years of experience in penetration testing or Red Team operations, with expertise in tools like Burp Suite, Nmap, and Wireshark. A solid understanding of Active Directory, cloud security, and scripting is essential. HiQ offers a collaborative environment that encourages continuous learning and growth.

Qualifications

• At least 5 years of practical experience in penetration testing or Red Team operations.
• Strong background in assessing and securing web applications.
• Understanding of modern cloud platforms and architectures.

Responsibilities

• Perform hands-on penetration testing and vulnerability assessments.
• Conduct Red Team engagements and cloud security probes.
• Provide clear documentation of vulnerabilities and recommendations.

Skills

Penetration testing

Experience with Burp Suite

Nmap proficiency

Wireshark usage

Active Directory security assessments

Cloud security knowledge

Scripting

Education

Relevant education or certifications (e.g., OSCP, OSCE, AWS/Azure Security)

Job description

At HiQ, every challenge is an invitation to explore new possibilities. We're looking for someone who thrives on the thrill of discovery, who sees every system as a puzzle waiting to be solved, and who finds energy in the pursuit of safer, smarter digital solutions.

As part of our Pentest team, you'll be at the heart of our mission to build secure applications and environments for some of the most exciting organizations in the Nordics. Your days will be filled with hands‑on penetration testing, creative problem‑solving, and the freedom to dive deep into the latest tools and techniques. Whether you're orchestrating a Red Team engagement or probing the intricacies of cloud security, you'll have the autonomy to shape your own approach, while always knowing that a team of passionate experts has your back.

You'll work with Burp Suite, Nmap, Wireshark, and a host of other tools, sometimes in the cloud, sometimes on‑prem, always at the cutting edge. Your experience with Active Directory and scripting will come to life as you navigate complex environments, uncover vulnerabilities, and help our clients see their systems through a new lens. If you've cracked hashes, explored mobile app security, or sharpened your skills in CTFs, you'll find plenty of opportunities to push your expertise even further.

What You Bring

• At least 5 years of practical experience in penetration testing or Red Team operations
• Deep familiarity with industry‑standard tools such as Burp Suite, Nmap, and Wireshark
• Strong background in assessing and securing web applications
• Proven experience performing Active Directory and broader network security assessments
• Understanding of modern cloud platforms and architectures
• Scripting skills that enable you to automate workflows and develop new solutions
• Relevant education and/or certifications (e.g., OSCP, OSCE, AWS/Azure Security)
• Excellent communication skills, with the ability to clearly document and articulate vulnerabilities and recommendations
• Swedish citizenship, as HiQ carries out security‑classified assignments that may require it

Bonus Skills

• Experience with hash cracking
• Knowledge of mobile application security
• Knowledge in cloud security
• Networking know‑how
• Capture the Flag participation
• Insights into computer forensics

Here, learning is woven into the fabric of every project. Whether you're pursuing new certifications, experimenting with the latest exploits, or sharing insights with colleagues, you'll find endless room to grow. We celebrate curiosity and initiative, if you spot an opportunity to make something better, you'll have the freedom and support to make it happen.

You will be trusted to run penetration tests independently, but you'll never be alone. Collaboration is second nature here: ideas bounce, knowledge flows, and everyone's voice matters. You'll document your findings with clarity, communicate risks with empathy, and help guide clients toward stronger, more resilient solutions.

If you're ready to join a team where your passion for security is matched only by your drive to learn and create, we'd love to meet you.

Ready to take the next step? Apply now and let's build something extraordinary together.