Penetration Tester

Quick Facts

• Role: Penetration Tester (fully remote)

Description

You will plan, execute, and document penetration tests across a range of environments (web applications, mobile apps, APIs, cloud infrastructure, enterprise networks, mainframes, IoT, and OT). You will validate vulnerabilities, investigate realistic attack paths, and produce technical reports plus management summaries. The role emphasizes technical curiosity, clear communication, and continuous improvement through automation and collaboration.

Responsibilities

• Plan, perform, and document penetration tests independently according to quality standards and established methods (e.g., OWASP test guides)

• Validate vulnerabilities and analyze realistic attack paths to derive actionable recommendations

• Write technical reports and management summaries for IT teams and decision-makers

• Improve technical and operational processes and automate recurring steps

• Share findings in the team and support preparation and delivery of OffSec trainings (e.g., OSCP/OSWA)

Requirements

• Completed Bachelor’s or Master’s degree and at least 2 years of relevant professional experience

• Ability to handle projects largely independently after onboarding and request support when needed

• Technical curiosity and hands-on work with security topics through personal projects, labs, or research; willingness to get up to speed on unfamiliar systems

• Ability to communicate technical results clearly and write management summaries

• Experience with scripting and tools that support pentesting

• Team spirit with willingness to share knowledge and provide constructive feedback

• Clear, dependable communication with customers and partners; accountability for work and its quality

• Fluent German (spoken and written)

Benefits

• Fully remote work with a modern home office setup

• Annual salary: €57,700–€87,800

• Company pension plan

• Company training and continuing education

• Referral program

• Company mobile phone

• Flexible working hours and home office options

• Access to OffSec Learn Enterprise, learning materials, and hands-on training environments

• Support for growth as an OffSec or SANS Instructor, with selected learning activities potentially rewarded via bonuses or additional vacation

• Company pays for jointly selected technical conferences and provides time off

• Small specialized team with short decision paths and direct contact with the owner

• OffSec partnership access to learning offerings, cyber ranges, and partner knowledge exchange