{"id":4079404,"url":"https://alion.io/job/infinum-cybersecurity-consultant","title":"Cybersecurity Consultant","company":{"id":55716,"name":"Infinum","domain":"infinum.com","url":"https://alion.io/company/infinum","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Zagreb, Croatia"],"countries":["HR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"ISO 27001","optional":false},{"name":"Metasploit","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP SAMM","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-11T16:36:03Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-12T04:10:45Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We are looking for a detail-oriented Cybersecurity Consultant who is passionate about identifying vulnerabilities, tackling complex security challenges, and helping organizations defend against real-world cyber threats.\nWe're a team of 30+ people, with the majority based in the UK and the rest in Croatia. Our team plays a critical role in protecting our clients' digital products against potential threats and vulnerabilities. We're now looking to grow our Croatian team for the first time since joining forces with AMR CyberSecurity, a UK-based company specializing in penetration testing and security consulting.\nAMR brings an impressive track record, having worked with organizations like Zoom and ISC2 - often in industries where security failures can have consequences far beyond downtime.\nOur team works closely with engineers and system architects to make security an integral part of the software development lifecycle. We work on projects for global clients across industries like finance, hospitality, healthcare, and automotive, testing everything from web and mobile applications to infrastructure, networks, and IoT ecosystems.\nOur cybersecurity consultants think like attackers to stay one step ahead. Combining hands-on technical expertise, creative problem-solving, and real-world attack techniques, they utilize a wide range of specialist security tools to uncover vulnerabilities, challenge defenses, and help organizations build resilience against evolving cyber threats\nThe ideal candidate has a keen eye for detail, up-to-date knowledge of security best practices, and hands-on experience conducting penetration tests as part of client engagements.\nJoining our team is an opportunity to learn from experienced security professionals, exchange knowledge across borders, and contribute to a team tackling some genuinely interesting security challenges.\nYour responsibilities\nconduct penetration testing on web & mobile applications to identify security vulnerabilities\nconduct infrastructure and cloud security testing to identify potential weaknesses and misconfigurations\nprovide detailed reports of your findings, including risk assessments and remediation recommendations\ncollaborate with clients’ teams to help them understand and fix vulnerabilities\ndevelop and maintain test scripts and custom exploits for use in penetration tests\nstay up to date with the latest attack techniques and tools in order to improve the testing processes and methodologies\ncontribute to improving security processes and training team members on security best practices\nRequirements\nat least 3 years of experience in web & mobile penetration testing, cloud testing, and application security\na deep understanding of OWASP standards and guidelines such as the WSTG, ASVS, MASTG, MASVS, and SAMM\nstrong communication and interpersonal skills for collaborating with both technical and non-technical stakeholders\nexperience with writing penetration testing reports in a clear, concise, and understandable way\na keen eye for identifying hidden weaknesses that others might overlook, as the smallest vulnerabilities can lead to major breaches\na strong understanding of the offensive security landscape\naffinity for keeping up with general cybersecurity best practices and news\ncomfortable taking ownership of various aspects of a project and being in charge of ensuring everything is delivered on time\nexcellent knowledge of written and spoken English\nat least one recognized certification focused on offensive security, e.g., PenTest+, eWPT, eMAPT, OSCP, OSWE, GWAPT, or similar\nwillingness to travel occasionally for client meetings, workshops, and on-site engagements\nBonus point\nhands-on experience with penetration testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap)\nfamiliarity with application security principles and network protocols\nfamiliarity with cloud security and related attack vectors\nexperience in programming or scripting (Python, Bash, etc.) to automate tasks\nfamiliarity with compliance standards (e.g., ISO 27001, SOC2, PCI-DSS) and their security implications\nBenefits\nYou can read more about the benefits here.","description_format":"text","description_chars":4147,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Croatia","iso":"HR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Mobile App Development Services","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-11T16:36:03Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:4","win:early"],"computed_at":"2026-11-12T08:10:54Z"},"pay":null,"html_url":"https://alion.io/job/infinum-cybersecurity-consultant","json_url":"https://alion.io/job/infinum-cybersecurity-consultant.json","meta":{"generated_at":"2026-11-12T08:10:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16406,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":55716},"rest":"https://alion.io/mcp/rest/get_company?id=55716"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finfinum-cybersecurity-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finfinum-cybersecurity-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finfinum-cybersecurity-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/infinum-cybersecurity-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finfinum-cybersecurity-consultant"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4079404}},{"tool":"search_jobs","arguments":{"company":"infinum.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4079404},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}