Penetration Testing Engineer/ 1

Description

The team is looking for a senior engineer with an offensive security focus to join the information security team, working on penetration testing, security assessments and infrastructure security audits across varied environments.

You will find architectural weaknesses and help shape the team's approach to testing.

The company helps businesses and public institutions with digital transformation through IT services. It operates in Warsaw, Poznan, Katowice, Lublin, Rzeszow and Lodz, and is part of a global group active in 19 countries with over 28,000 staff. In 2023 the group reported revenues of €2.5 billion.

Responsibilities

• Run penetration tests against internal infrastructure, internal environments and public-facing web applications.
• Test authentication, authorization, business logic and APIs.
• Find, verify and record vulnerabilities against standards such as the OWASP Top 10 and MITRE ATT&CK.
• Review network, system and application security controls.
• Audit cloud-native, distributed and in-house cloud architectures, as well as the physical security of company sites.
• Assess complex enterprise environments: Kubernetes, OpenStack, Apache Kafka, Active Directory, Microsoft Entra ID, LAN and WAN networks, Linux and Windows servers, and hybrid cloud and on-premise setups.
• Plan and carry out internal red team exercises that mimic realistic threat actors, including attack path analysis, privilege escalation, social engineering, credential compromise and lateral movement.
• Present findings, risk assessments and remediation advice to technical staff and management, and write up tests, assessments and audits.
• Help with remediation and security architecture improvements, working with system owners, platform teams, developers, and IT, network and application teams.
• Take part in architecture reviews and technical design discussions.
• Build and maintain test methodologies, attack playbooks and automation scripts, and help improve offensive security tooling.
• Support work toward ISO 27001, NIS2 and other security frameworks, and contribute technical input to security projects.
• Share attack techniques, lessons learned and good practice to raise security awareness.

Requirements

• A degree in computer science, IT security or a comparable field.
• Several years of experience in information security, offensive security, penetration testing or red teaming.
• Hands-on penetration testing across Active Directory and Microsoft Entra ID, LAN, WAN and WLAN networks, Windows, Mac and Linux systems, in-house and public web applications, and APIs.
• Experience with in-house cloud security (OpenStack, Kubernetes, containers) and public cloud security (AWS, Azure, M365).
• A solid grasp of current attack techniques and adversary tactics.
• Working knowledge of common penetration testing methodologies and frameworks.
• Strong analytical and problem-solving skills.
• Experience writing technical reports and presenting findings to stakeholders.
• Good communication skills and a collaborative approach.
• English and Polish, both written and spoken, at B2 level or higher.

Conditions

Hybrid work: 3 days in the office and 2 days from home.

Offices in Warsaw, Poznan and Lublin.

The company has an internal whistleblowing procedure.

The company treats all candidates equally and gives everyone the same opportunities.

Benefits

• Flexible working hours.
• A cafeteria system to choose from a range of benefits.
• Referral bonuses of up to PLN6,000 for referring specialists.
• Revenue sharing for starting partnerships with new clients.
• Training, certifications and tech conference attendance, fully funded.
• A dedicated Team Manager for ongoing guidance.
• A technical leader assigned as mentor, matched to your expertise and project needs.
• A team-building budget for online and on-site events.
• Chances to join charity projects and local sports programmes.