Web & API Penetration Tester

Rate: 150–160 PLN/h + VAT

Start date: Within 1 month / flexible

Description

We are looking for an experienced Web Application & API Penetration Tester to support the delivery of security assessments for clients across multiple industries. This is a hands-on role focused on identifying vulnerabilities, validating security risks, and helping organizations improve the security of their applications and APIs. You will work directly with clients, contribute to technical recommendations, and support the delivery of high-quality penetration testing engagements.

Responsibilities

• Perform web application and API penetration testing engagements.
• Conduct manual security testing and vulnerability validation.
• Assess authentication, authorization, session management, and business logic controls.
• Prepare clear technical reports and remediation recommendations.
• Present findings and security risks to clients and stakeholders.

Expectations

• 4+ years of hands-on penetration testing experience.
• Strong experience in web application and API security testing.
• Practical expertise with Burp Suite and common offensive security tools.
• Good understanding of OWASP Top 10, authentication mechanisms, and common attack techniques.
• Experience with Python, PowerShell, or Bash scripting.
• Exposure to infrastructure, Active Directory, cloud, or mobile security testing is a plus.
• OSCP, CRTP, CRTO, CREST, or similar certifications will be considered an advantage.

What We Offer

• Medicover healthcare package
• Multisport card
• Access to an e-learning platform
• Group life insurance