Penetration Tester (Offensive Security)

At Uni Systems, we are working towards turning digital visions into reality. We are continuously growing and we are looking for a Penetration Tester to join our UniQue Offensive Security and Assurance Unit team.

What will you be bringing to the team?

Our UniQue people come from a variety of different backgrounds and industries, with different skillsets and approaches, but they have one thing in common: passion for technology and innovation!

For the Penetration Tester role we expect you to:

• Perform internal and external infrastructure penetration testing, covering networks, systems and Active Directory environments.
• Conduct Web Application and API penetration testing using black-box, grey-box and white-box approaches.
• Perform vulnerability assessments, analyze scan results and manually validate identified vulnerabilities, including controlled exploitation where appropriate.
• Participate in Security Source Code Reviews to identify vulnerabilities and insecure coding practices.
• Prepare penetration testing and vulnerability assessment reports, including technical findings, supporting evidence, risk assessment and remediation recommendations.
• Perform re-testing to verify that identified vulnerabilities have been addressed.
• Explain and demonstrate the technical and business impact of identified vulnerabilities to clients.
• Develop or customize scripts and tools to support penetration testing activities.
• Participate in the planning and execution of security assessments, following the agreed scope, testing methodology and Rules of Engagement.
• Support specialized engagements, including Red Team operations, Mobile Application Penetration Testing and Social Engineering assessments.

Requirements

What do you need to succeed in this position?

Your experience, skillset and qualifications are going to help you succeed in this position, moving forward.

• University/College degree in Information Security, Computer Science, Information Technology or a related discipline, or equivalent practical experience.
• 3+ years of hands-on experience in Penetration Testing or Offensive Security.
• Hands-on experience in Web Application/API or Infrastructure Penetration Testing, with working knowledge of the other area.
• Experience in vulnerability assessments, manual testing and exploitation techniques.
• Familiarity with Security Source Code Review and common application security weaknesses.
• Good knowledge of Windows and Linux operating systems, networking concepts and Active Directory security.
• Understanding of common Web Application and API vulnerabilities, including the OWASP Top 10 and OWASP API Security Top 10.
• Experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, Nessus or equivalent.
• Experience with scripting and automation using Python, Bash, PowerShell or similar languages.
• Knowledge of penetration testing methodologies and frameworks, such as OWASP WSTG and PTES.
• Understanding of security technologies such as firewalls, IDS/IPS, WAFs and VPNs.
• Ability to prepare clear technical reports and communicate security findings to technical and business stakeholders.
• Excellent knowledge of the English language (written and verbal).
• Flexibility to travel abroad (mainly EU countries, approximately 5% of working time).

The following will be considered an asset:

• Relevant penetration testing and offensive security certifications, such as OSCP, CEH, CPTS, PNPT, eCPPT, eWPT, CREST, GPEN, GWAPT, BSCP, CRTO or equivalent, will be considered an asset.
• Experience in Red Team operations, Mobile Application Penetration Testing or Social Engineering assessments.
• Experience in cloud security assessments, particularly Microsoft Azure or AWS.
• Master's Degree in Information Security or a related discipline.

Benefits

What are we offering to our UniQue IT People?

• People-first approach and open environment to express your ideas
• Work-life balance and a hybrid work model
• Continuous training and development
• Opportunities to join innovation initiatives
• Ticket restaurant - meal vouchers
• Corporate laptop and equipment
• Corporate mobile phone subscription
• Health and insurance plan for you and your family members
• Employee consulting and guidance support by Ergonomia
• Discounts on the services and products of our Group’s companies
• Gift vouchers for major life milestones
• Special work schedule on summer Fridays and birthdays

Our UniQue IT people are the most valuable part of Uni Systems; their knowledge and experience have made us the leading and reliable systems integrator of today and have contributed to our steady financial growth. We have created and are maintaining a stable working environment for our employees, with countless opportunities to innovate and thrive. Our work culture recognizes our UniQue IT people and supports the free sharing of ideas and the flow of information via open communication while appreciating and effectively utilizing the talents, skills, and perspectives of each employee.

At Uni Systems, we are providing equal employment opportunities and banning any form of discrimination on grounds of gender, religion, race, color, nationality, disability, social class, political beliefs, age, marital status, sexual orientation or any other characteristics. Take a look at our Diversity, Equality & Inclusion Policy for more information.