{"id":850092,"url":"https://alion.io/job/sphynx-penetration-tester-appsec-engineer","title":"Penetration Tester / AppSec Engineer","company":{"id":689448,"name":"Sphynx","domain":"sphynx.ch","url":"https://alion.io/company/sphynx","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":92,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Athens, Greece"],"countries":["GR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"JavaScript","optional":false},{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-05-30T00:00:00Z","employer_posted_date":"2026-05-30","last_verified_at":"2026-11-02T08:40:21Z","board_verified":true,"closed_at":null,"days_open":156,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":156},"description":"The Penetration Tester / Application Security (AppSec) specialist at Sphynx is responsible for identifying and addressing security vulnerabilities within applications and systems, as well as perform penetration tests for our clients. This role involves performing penetration tests, security assessments, and providing actionable recommendations to enhance the overall security posture.\nResponsibilities\nConduct penetration testing on web, mobile, and network applications to identify security risks.\nPerform static and dynamic application security testing and code reviews.\nIdentify and report security vulnerabilities, providing detailed risk analysis and remediation guidance.\nCollaborate with development teams to integrate secure coding practices and improve the security lifecycle.\nDevelop and maintain security testing tools and documentation.\nStay current with emerging security threats, vulnerabilities, and mitigation techniques.\nAssist in designing and implementing application security policies and standards.\nRequirements\nBachelor's degree in Computer Science, Cybersecurity, or related field.\nAt least 2 years of professional experience in penetration testing and application security assessments.\nStrong knowledge of web application security, OWASP Top 10, and common vulnerabilities.\nExperience with penetration testing tools such as Burp Suite, Metasploit, Nessus, or similar.\nProficiency in scripting and programming languages (e.g., Python, JavaScript).\nUnderstanding of secure software development lifecycle (SDLC).\nExcellent analytical, problem-solving, and communication skills.\nRelevant certifications such as OSCP, CEH, or GIAC (GWAPT) are highly desirable.\nBenefits\nCompetitive remuneration package adjusted to proven skills and experience;\nExcellent working conditions;\nExposure to training and professional development capabilities, including the ability to engage in cutting-edge research;\nExposure to international clients and collaborators.","description_format":"text","description_chars":1970,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Application Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-09-13T03:11:27Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.189,"p_room":0.28,"age_days":156,"expected_fill_days":24,"reasons":["conf:4","win:tail","crowd:"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/sphynx-penetration-tester-appsec-engineer","json_url":"https://alion.io/job/sphynx-penetration-tester-appsec-engineer.json","meta":{"generated_at":"2026-11-02T09:49:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13717,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":689448},"rest":"https://alion.io/mcp/rest/get_company?id=689448"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsphynx-penetration-tester-appsec-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsphynx-penetration-tester-appsec-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsphynx-penetration-tester-appsec-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sphynx-penetration-tester-appsec-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsphynx-penetration-tester-appsec-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":850092}},{"tool":"search_jobs","arguments":{"company":"sphynx.ch","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":850092},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}