Red Team PenTester

About the role

We are looking for a highly skilled Penetration Tester with hands‑on offensive security experience to join our growing security team. You will assess the security posture of web applications, networks, cloud platforms and internal infrastructures through realistic attack simulations.

Key responsibilities

• Perform web application, API, network and infrastructure penetration tests and manual testing beyond automated scanners.
• Execute adversary‑style attack chains including lateral movement, privilege escalation and Active Directory abuse.
• Assess cloud environments (AWS, Azure, GCP) for configuration and architectural weaknesses.
• Produce high‑quality reports with technical detail and business impact, and present findings to engineering and management.
• Support remediation, validation and retesting while staying current with vulnerabilities and exploit techniques.

Required profile

• 3+ years of hands‑on penetration testing/offensive security experience.
• Strong understanding of web vulnerabilities (OWASP Top 10), API security, internal network attack techniques and Active Directory exploitation.
• Excellent verbal and written communication skills, able to explain risks to technical and non‑technical stakeholders.
• Self‑driven, curious, proactive with effective time management across multiple engagements.

Required skills

• Burp Suite, Nmap, Metasploit, BloodHound, CrackMapExec, Impacket.
• TCP/IP, DNS, HTTP(S), Kerberos, NTLM, OAuth2, SSO.
• Linux and Windows environments, Bash, PowerShell, basic Python scripting.
• Web vulnerability knowledge (OWASP Top 10, API security), privilege escalation on Windows and Linux.

What we offer

• Full‑time permanent contract with competitive salary, bonus plan, lunch vouchers and 25 vacation days.
• Opportunity to buy company shares at a 15% discount.
• Flexible work hours, hybrid work‑from‑home policy.
• Learning opportunities, both online and offline, to develop core and professional skills.
• Modern office in Bucharest with relaxation areas, library, cafeteria and regular social activities.