penetration tester in cybersecurity

HireHi; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Private health insurance

Performance-based bonus

Professional training portal access

Corporate events and amenities

Certification compensation (AWS, PMP,

Job summary

HireHi is seeking a seasoned cybersecurity professional to lead penetration testing across web apps, APIs, networks, and cloud environments. You will plan, execute, document, and present findings to system owners and management, and support remediation efforts.

The role requires 5+ years in cybersecurity with 3+ years hands-on testing, OWASP-aligned assessments, and strong tooling experience (Burp Suite Pro, Nmap, Metasploit).

Qualifications

• 5+ years of cybersecurity experience with 3+ years hands-on pen testing.
• Experience testing web apps and APIs per OWASP Top 10, WSTG, ASVS.
• Experience testing internal/external infrastructure including AD.
• Proficient with Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket.
• Hands-on certification: OSCP/OSWE/OSEP/CRTO/eWPTX/GPEN/GWAPT.

Responsibilities

• Plan and perform penetration tests of web applications, APIs, internal and external networks, Active Directory, and cloud environments
• Conduct manual testing beyond automated scanning, including exploitation and privilege escalation within the agreed rules of engagement
• Validate findings, assess business risk, and produce clear technical and executive reports
• Present results to system owners and management, and support remediation and retesting
• Contribute to red teaming or purple teaming exercises with SOC and detection teams
• Maintain testing methodologies, tools, and templates

Skills

Penetration testing

Web apps & APIs

Infrastructure testing

English proficiency

Security tooling

Education

OSCP/OSWE/OSEP/CRTO/eWPTX/GPEN/GWAPT

Tools

Burp Suite Pro

Nmap

Metasploit

BloodHound

Impacket

Job description

Описание

The project provides cybersecurity and digital services for international organizations in a large, heterogeneous, multi-tenant environment. It strengthens vulnerability management capabilities to identify, assess, prioritize, and mitigate security risks across organizations worldwide. The customer provides digital infrastructure, cloud services, cybersecurity, data-driven solutions, and managed IT support, helping organizations modernize technology environments, strengthen security, and improve the reliability and scalability of digital operations.

Задачи

• Plan and perform penetration tests of web applications, APIs, internal and external networks, Active Directory, and cloud environments
• Conduct manual testing beyond automated scanning, including exploitation and privilege escalation within the agreed rules of engagement
• Validate findings, assess business risk, and produce clear technical and executive reports
• Present results to system owners and management, and support remediation and retesting
• Contribute to red teaming or purple teaming exercises with SOC and detection teams
• Maintain testing methodologies, tools, and templates

Требования

• 5+ Years of cybersecurity experience, including 3+ years of hands-on penetration testing
• Experience testing web applications and APIs according to OWASP (Top 10, WSTG, ASVS)
• Experience conducting internal and external infrastructure testing, including Active Directory attacks
• Working knowledge of standard tools such as Burp Suite Pro, Nmap, Metasploit, BloodHound, and Impacket
• At least one recognized hands-on certification: OSCP, OSWE, OSEP, CRTO, eWPTX, GPEN, or GWAPT
• Clean professional records and willingness to undergo background verification
• Upper-Intermediate or higher English
• Будет плюсом: hands-on cloud penetration testing (Azure, Microsoft 365, AWS), mobile application testing (Android, iOS), Red Teaming or Purple Teaming experience including familiarity with C2 frameworks, scripting and security tooling skills (Python, PowerShell, Bash), experience with PTES, OSSTMM, or NIST SP 800-115 methodologies, a proven security research track record such as published CVEs or recognized bug bounty findings

Условия

The opportunity to change projects and/or develop expertise in an interesting business domain

Professional, financial, and career growth; mentoring and adaptation systems for each new employee

Opportunity to earn up to an additional 1,000 EUR per month depending on expertise, included in the annual bonus, by participating in company activities

Access to the corporate training portal and its regularly updated knowledge base

Corporate events and amenities, including parties, pizza days, PlayStation, fruit, coffee, snacks, and movies

Certification compensation (AWS, PMP, etc.)

Referral program

Private health insurance and sports compensation, depending on the type of employment

Work locations: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Hungary, Italy, Latvia, Lithuania, Luxembourg, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, and The Netherlands