Application Penetration Tester

Quick Facts

• Role: Application Penetration Tester (Cyber Security)

• Focus: Web, mobile, thick-client applications, and API security testing

Description

You will carry out penetration tests of web applications, mobile apps, thick-client applications, and API interfaces. The work includes identifying and analyzing vulnerabilities, evaluating their impact, performing static source-code analysis, and using AI and modern tools to support vulnerability identification and verification. You will also participate in security tests for solutions based on AI, LLMs, and agent-based systems, then report results and recommendations to clients.

Responsibilities

• Perform penetration tests for web, mobile, thick-client applications, and API interfaces

• Identify, analyze, and verify application vulnerabilities and assess their impact

• Conduct static analysis of application source code for vulnerabilities

• Participate in security testing of AI/LLM/agent-based solutions

• Review information system security architecture

• Prepare test reports with remediation recommendations

• Present findings and recommendations to clients

• Work with clients’ technical teams to remediate vulnerabilities

• Contribute to the development of team methodologies, tools, and competencies

Requirements

• Minimum 1 year of experience in application penetration testing

• Practical knowledge of testing web, mobile, API, or thick-client applications

• Familiarity with common application vulnerabilities, including OWASP Top 10

• Practical experience with tools such as Burp Suite, OWASP ZAP, or similar

• Ability to analyze source code and use AI tools and manual techniques to identify and verify vulnerabilities

• Ability to identify vulnerabilities, assess risk, and prepare reports

• English proficiency for reading and creating technical documentation and client communication

• Ability to communicate independently and professionally with clients at all stages of testing

Benefits

• Hybrid or remote work model

• Challenging work in a leading Polish and international advisory firm

• Funding for professional qualifications

• Continuous development support (e.g., postgraduate studies, language courses, exam preparation)

• Broad training package (Degreed, Pluralsight, LinkedIn Learning, technical training, certified Microsoft training)

• Buddy support

• Referral bonus program

• Cafeteria benefits package (including MultiSport card, cinema/theater tickets, vouchers/discounts)

• Private medical care and additional insurance; wellbeing program

• Financial support for industry events and skill development

• Travel and team integration meetups

• Extra volunteering days and charitable grant

• Holiday gifts or bonuses