{"id":2427524,"url":"https://alion.io/job/swiss-post-cybersecurity-junior-application-security-penetration-tester","title":"Junior Application Security Penetration Tester","company":{"id":54333,"name":"Swiss Post Cybersecurity","domain":"swisspost-cybersecurity.ch","url":"https://alion.io/company/swiss-post-cybersecurity","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Luxembourg City, Luxembourg"],"countries":["LU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":142000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":575},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"LLM","optional":false},{"name":"Red Teaming","optional":false},{"name":"Burp Suite","optional":true},{"name":"CWE","optional":true},{"name":"Frida","optional":true},{"name":"GraphQL","optional":true},{"name":"JavaScript","optional":true},{"name":"Nmap","optional":true},{"name":"Objection","optional":true},{"name":"OWASP","optional":true},{"name":"OWASP ASVS","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true},{"name":"SQLmap","optional":true}],"status":"live","first_seen_at":"2026-10-12T09:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-12T09:00:00Z","board_verified":false,"closed_at":null,"days_open":12,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":12},"description":"Junior Application Security Penetration Tester \r\n100% | Luxembourg \n\nSwiss Post Cybersecurity, a subsidiary of Swiss Post formed in 2024 from the merger of Hacknowledge and terreActive, helps more than 350 organisations across Europe strengthen their cyber resilience from offices in Aarau, Morges, Zurich and Luxembourg. \nJoin our growing Offensive Security team in Luxembourg, where you will work on real world client engagements, apply modern security frameworks and help shape secure development practices. \n\nWhat You Will Do \n\nConduct hands-on penetration tests and vulnerability assessments of web applications, mobile applications and APIs, including cloud-hosted and AI/LLM enabled features. \n\nSupport the team on other types of engagements (Red Team, internal and external infrastructure, Active Directory, cloud and wireless pentests, phishing campaigns, etc.). \n\nContribute to improving Swiss Post Cybersecurity’s tools and services (script and tool development, R&D, testing, and setting up new threat identification methods, etc.). \n\nTechnology watch: keep up with emerging threats and attack techniques, as well as evolving security standards and best practices. \n\nCollaborate with development teams on application architecture reviews and secure code reviews. \n\nWrite clear, reproducible reports with remediation guidance tailored to both technical and management audiences. \n\nParticipate in defining and improving internal pentesting methodologies and tooling. \n\nWork under the supervision of senior pentesters, progressively leading testing phases and client communication. \n\nWhat We’re Looking For \n\n0–2 years of experience in penetration testing or application security. \n\nPassion for offensive security, curiosity and a strong eagerness to learn (CTFs, Hack The Box, Root-Me, bug bounty or personal labs are a plus). \n\nFoundational knowledge of web concepts (HTTP, REST/GraphQL APIs, authentication flows such as OAuth 2.0 and OpenID Connect) and coding (JavaScript, Python, Java). \n\nHands-on experience with common pentesting tools (Burp Suite, SQLMap, Nmap, ffuf, etc.). \n\nUnderstanding of common vulnerabilities (OWASP Top 10, OWASP API Security Top 10, CWE Top 25). \n\nSolid scripting skills (Python, PowerShell, Bash, etc.). \n\nFamiliarity with frameworks and standards such as OWASP ASVS, OWASP MASVS/MASTG or PTES is a plus. \n\nInterest in emerging areas such as cloud and AI/LLM application security (OWASP Top 10 for LLM Applications) is a plus. \n\nExperience with mobile application testing (rooting/jailbreaking devices, Frida, Objection) is a plus. \n\nStrong logical reasoning, analytical mindset, and problem-solving skills. \n\nExcellent written and spoken communication skills in French and English; an additional language (German, Luxembourgish, Italian) is a plus. \n\nTeam player, adaptable to fast-paced consulting engagements; occasional travel. \n\nWhat We Offer \n\nCompetitive salary and benefits (health insurance, meal vouchers, flexible working hours). \n\nLearning and development allowance for courses and certifications. \n\nHybrid working model: office-based with remote flexibility (depending on place of residence). \n\nMentorship from senior pentesters and security consultants, and access to the expertise of around 150 colleagues across Switzerland and Luxembourg. \n\nParticipation in security conferences and community events (hack.lu, Black Alps). \n\nJob Details \n\nEmployment: 100%, Permanent \nTeam: Application Security / Offensive Security \nLocation: Luxembourg (Swiss Post Cybersecurity Lux SA) \nStart: As soon as possible, flexible","description_format":"text","description_chars":3571,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance","Hybrid work"],"hiring_locations":[{"name":"Luxembourg","iso":"LU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Application Security","Information Technology","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-13T08:05:53Z"}],"visa":[],"liveness":{"score":74,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.819,"p_room":0.9,"age_days":11,"expected_fill_days":28,"reasons":["seen:11","win:mid","comp:junior,attention"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/swiss-post-cybersecurity-junior-application-security-penetration-tester","json_url":"https://alion.io/job/swiss-post-cybersecurity-junior-application-security-penetration-tester.json","meta":{"generated_at":"2026-10-24T18:53:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27667,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":54333},"rest":"https://alion.io/mcp/rest/get_company?id=54333"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fswiss-post-cybersecurity-junior-application-security-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fswiss-post-cybersecurity-junior-application-security-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fswiss-post-cybersecurity-junior-application-security-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/swiss-post-cybersecurity-junior-application-security-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fswiss-post-cybersecurity-junior-application-security-penetration-tester"}]}