{"id":4132055,"url":"https://alion.io/job/itm8-senior-appsec-penetration-tester","title":"Senior AppSec Penetration Tester","company":{"id":2102854,"name":"itm8","domain":"itm8.dk","url":"https://alion.io/company/itm8-dk","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Copenhagen, Denmark"],"countries":["DK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-11-04T11:13:57Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-13T00:56:09Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"As one of the leading cybersecurity teams in Denmark, we are a highly skilled and passionate team dedicated to helping our customers protect their digital realms, by hacking their systems proving real exploitation and impact. Our team consists of experts who live and breathe for hacking, and the crew show great pride in keeping themselves cutting edge and up to date with emerging threats.\nThe Offensive AppSec team is growing and is looking for an experienced penetration tester with a deep understanding of web applications. The Offensive AppSec team is responsible for helping identify and exploit vulnerabilities across areas such as web, mobile, AI, kiosk and desktop.\nIn the Offensive AppSec team at itm8, we understand that testing applications requires more than going through a checklist or running automated scans. Context matters. We pride ourselves in understanding that AppSec is multidimensional and proving impact by showing exploitation chains and attack narratives of multiple vulnerabilities.\nYour role\nWe are looking for an experienced penetration tester to join us as a Security Advisor, with strong practical skills in web application security and an interest in expanding into areas such as mobile, AI, or mainframe security.\nYou will own engagements from scoping through testing, reporting, and customer debriefing. You should be comfortable working independently, adapting to different customer environments, and explaining technical findings to both developers and business stakeholders.\nYou will also contribute to the team's technical development by sharing knowledge, reviewing findings, and supporting less experienced colleagues.\nKey responsibilities\nIdentify complex vulnerabilities, develop exploitation chains, and demonstrate their impact.\n\nLead penetration testing engagements from scoping through testing, reporting, and customer debriefing.\n\nCommunicate technical risks and their business implications to management and executive stakeholders.\n\nAssess and prioritise vulnerabilities based on business context and risk.\n\nShare knowledge about emerging threats and support the development of less experienced colleagues.\n\nWe are looking for a teamm8 who\nHas at least 3 years of AppSec cybersecurity consulting or working with software security.\n\nHas a proven track record in penetration testing, bug bounty or similar activities.\n\nHas a strong understanding of web vulnerabilities and exploitation across technologies.\n\nHas experience documenting security findings and communicating practical remediation advice.\n\nIs able to perform onsite assignments in the Zealand and Copenhagen area.\n\nHas a clean criminal record.\n\nHas full working proficiency in English.\n\nNice to have\nIdeally you bring one or more of the following:\nRelevant certifications such as: OSWE, eWPTX, CWEE, OSWA, eWPT, OSCP, CPTS or similar.\n\nSecurity research, whether formally published or conducted independently.\n\nExperience with static analysis and source code review.\n\nExperience with AI-enhanced penetration testing.\n\nPublic CVEs or CTF placings.\n\nWhat you get\nCompetitive salary.\n\nOpportunities and budget for growth and learning.\n\nAccess to a large group of colleges that only focus on cyber security.\n\nThe opportunity to be part of a highly skilled and passionate cybersecurity team that takes pride in staying cutting edge and up to date with emerging threats.\n\nReady to join the team?\nWe look forward to receiving your CV.\nIf you have questions about the position, you're always welcome to contact Christoffer Bech on email () - we're here to help.\nWe conduct interviews on an ongoing basis and will close the recruitment process as soon as we've found the right match. Please note that a criminal record check will be obtained prior to employment.\nAbout itm8\nWe are itm8 - our customers’ IT-mate.\n1,600+ teammates across Denmark, Sweden, the Philippines, and the Czech Republic. With specialists in everything from IT security and ERP to AI and software development.\nBut what brings us together isn’t just technology. It’s PURPLE POWER - our way of working. Here, we help each other first, celebrate what works, and cut through the bullshit. We believe in ambition over the status quo. And that our differences make us stronger.\nWith us, it’s not about being perfect. It’s about taking responsibility, creating value, and growing - every day.\nSound like you? Then apply - and become our next team’m8’.","description_format":"text","description_chars":4432,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Application Security","IT Consulting & Digital Transformation","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-11-12T02:52:32Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":7,"expected_fill_days":73,"reasons":["conf:1","win:early"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/itm8-senior-appsec-penetration-tester","json_url":"https://alion.io/job/itm8-senior-appsec-penetration-tester.json","meta":{"generated_at":"2026-11-13T04:23:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9324,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2102854},"rest":"https://alion.io/mcp/rest/get_company?id=2102854"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fitm8-senior-appsec-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fitm8-senior-appsec-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fitm8-senior-appsec-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/itm8-senior-appsec-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fitm8-senior-appsec-penetration-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4132055}},{"tool":"search_jobs","arguments":{"company":"itm8.dk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4132055},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}