{"id":63960,"url":"https://alion.io/job/pgcareers-offensive-security-engineer-penetration-testing","title":"Offensive Security Engineer, Penetration Testing","company":{"id":871,"name":"Procter & Gamble","domain":"pg.com","url":"https://alion.io/company/pgcareers","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":128,"ghost_share":0,"stale_share":0.742,"repost_share":0.008,"time_to_fill_p50_days":38,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":61000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"C#","optional":false},{"name":"Function Calling","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false},{"name":"AI Agents","optional":true},{"name":"BloodHound","optional":true},{"name":"Burp Suite","optional":true},{"name":"Frida","optional":true},{"name":"Ghidra","optional":true},{"name":"IAM","optional":true},{"name":"LLM","optional":true},{"name":"Metasploit","optional":true},{"name":"Nmap","optional":true},{"name":"RAG","optional":true}],"status":"live","first_seen_at":"2026-08-19T00:00:00Z","employer_posted_date":"2026-08-19","last_verified_at":"2026-10-17T23:44:06Z","board_verified":true,"closed_at":null,"days_open":59,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":59},"description":"Job Location\nWARSAW PLANT & GOJob Description\nAre you a person who is passionate about breaking applications, devices, services and/or processes to help protect them against the worlds most advanced cyber security adversaries?\nThe Information Security Protect organization at Procter & Gamble is responsible for providing a realistic depiction of threat actor behaviors and scenarios during simulated exercises. We drive improvements to applications and systems, as well as detection and response capabilities through regular testing of security controls across the enterprise.\nResponsibilities:\nLead defined-scope penetration tests across assigned areas such as websites, services, APIs, infrastructure, cloud environments, networks, IoT devices, mobile applications, and enterprise applications.\n\nPartner with Intake Management, senior testers, and stakeholders to confirm objectives, access, rules of engagement, test assumptions, and engagement readiness.\n\nExecute testing activities including reconnaissance, vulnerability discovery, exploitation, evidence collection, reporting, and remediation validation.\n\nIdentify, validate, exploit, and clearly document security vulnerabilities while operating safely within approved scope.\n\nValidate related vulnerabilities together where appropriate to demonstrate realistic impact within the boundaries of the engagement, escalating complex attack chains as needed.\n\nTest for control gaps where relevant and document observed weaknesses in preventative or detective controls.\n\nInvestigate and validate Vulnerability Disclosure Program and Bug Bounty findings, escalating complex or high-impact issues as needed.\n\nWork with engineering, product, cloud, infrastructure, and security teams to explain findings and support practical remediation.\n\nUse approved scripts, templates, automation, and AI-assisted workflows to support testing efficiency, triage, reporting, and remediation validation.\n\nAssist with testing AI-enabled applications and integrations for common risks such as prompt injection, sensitive data exposure, insecure tool use, and authorization flaws.\n\nProduce clear standardized reports with reproduction steps, evidence, impact, affected systems, and remediation guidance.\n\nContribute to team knowledge sharing, documentation, test notes, templates, and process feedback.\n\nJob Qualifications\nQualifications (Required):\nBachelor’s degree or equivalent Polish higher education qualification in Information Security, Cybersecurity, Computer Science, or a related field, OR 2+ years of relevant experience in lieu of a degree.\n\n2+ years of experience in penetration testing, application security testing, vulnerability validation, offensive security, or related security work.\n\nAbility to lead defined-scope penetration tests, manage day-to-day execution, document results clearly, and escalate complex, novel, or high-risk issues appropriately.\n\nExperience identifying, validating, and exploiting weaknesses in 2 or more domains such as web applications, APIs, mobile applications, cloud infrastructure, enterprise applications, databases, networks, servers, IoT devices, identity platforms, directory services, or AI-enabled systems.\n\nAbility to automate tasks with basic scripts or programs in at least one language such as Python, PowerShell, Bash, Go, C#, JavaScript, or similar.\n\nBasic Linux command-line experience and familiarity with Windows-based environments.\n\nAbility to read and understand code well enough to follow application behavior and identify security-relevant logic.\n\nBasic hands-on experience with at least one major cloud provider such as GCP, AWS, or Azure.\n\nAdversarial mindset with the ability to think from an attacker’s perspective while following rules of engagement and safety guidance.\n\nClear written and verbal communication skills with the ability to explain technical findings concisely.\n\nQualifications (Preferred Skills):\nOne or more penetration testing or security certifications such as OSCP, OSWE, GPEN, GXPN, GWAPT, PNPT, eJPT, or similar.\n\nExperience with CTFs, Bug Bounty programs, Vulnerability Disclosure Programs, coordinated vulnerability research, or public technical write-ups.\n\nExperience using AI tools to assist with reconnaissance, code review, vulnerability triage, payload development, reporting, or remediation validation.\n\nExposure to testing AI-enabled applications, LLM-based systems, AI agents, RAG systems, model integrations, or AI-enabled workflows.\n\nExperience with mobile, IoT, embedded systems, firmware, reverse engineering, or hardware security testing.\n\nExposure to cloud and identity attack paths involving SSO, MFA, OAuth, IAM, secrets exposure, conditional access, or privilege escalation.\n\nFamiliarity with tools such as Burp Suite, Nmap, Metasploit, Frida, Ghidra, IDA, BloodHound, or cloud security testing tools.\n\nCuriosity, humility, and a desire to improve technical depth, reporting quality, and testing consistency.\n\nWe offer\nP&G-sized projects and access to world leading IT partners and technologies from Day 1.\n\nWide range of self-development possibilities (training and certifications paths).\n\nCompetitive starting salary and benefits program (private health care, P&G stock, saving plans, sport cards).\n\nRegular salary increases and possible promotions - in line with your results and performance.\n\nOpportunity to change role every few years to be in the best place for you and best for P&G.\n\nAt Procter & Gamble, we embrace a hybrid work model that combines the flexibility of remote work with the collaborative benefits of in-office engagement. Employees can enjoy the option to work from home two days a week while also spending time in the office to foster teamwork and enhance communication.\nAt P&G #weseeequal\nWe are an equal opportunity employer and value diversity at our company. At P&G we strive to build a culture where everyone feels welcome, included, and able to bring their full selves to work.\nWe ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process. Please click here if you require an accommodation during the application process. Please make sure to wait to hear back from us regarding your accommodation before proceeding with the online assessment, we thank you in advance for your patience.\nKindly be advised that at P&G, employment is exclusively extended on the basis of \"Umowa o Pracę\" (Full-time Employment Contract). Apply only if you agree to these conditions.\nJob Schedule\nFull timeJob Number\nR000157572Job Segmentation\nExperienced Professionals","description_format":"text","description_chars":6604,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Application Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-08-19T00:00:00Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.35,"p_room":0.36,"age_days":59,"expected_fill_days":38,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/pgcareers-offensive-security-engineer-penetration-testing","json_url":"https://alion.io/job/pgcareers-offensive-security-engineer-penetration-testing.json","meta":{"generated_at":"2026-10-17T23:59:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2412,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":871},"rest":"https://alion.io/mcp/rest/get_company?id=871"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpgcareers-offensive-security-engineer-penetration-testing"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpgcareers-offensive-security-engineer-penetration-testing"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpgcareers-offensive-security-engineer-penetration-testing"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pgcareers-offensive-security-engineer-penetration-testing\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpgcareers-offensive-security-engineer-penetration-testing"}]}