Application Penetration Tester (Cyber Security)

Quick Facts

• Role: Application Penetration Tester (Cyber Security)

Description

You will perform penetration tests of web applications, mobile apps, thick-client applications, and API interfaces to identify and validate security vulnerabilities. You will use AI and modern tools to support vulnerability discovery, analysis, and verification, and also perform static source-code analysis. You will review security architectures, prepare reports with remediation recommendations, present results to clients, and support remediation together with client technical teams.

Responsibilities

• Conduct penetration testing of web, mobile, thick-client applications, and API interfaces

• Use AI and modern tooling to identify, analyze, and verify vulnerabilities

• Identify and analyze application vulnerabilities and assess their impact

• Perform static analysis of application source code for security issues

• Participate in security testing of AI-, LLM-, and agent-based solutions

• Review security architecture of information systems

• Prepare testing reports with remediation recommendations

• Present findings and recommendations to clients

• Collaborate with clients’ technical teams to eliminate vulnerabilities

• Contribute to the development of the team’s methodology, tools, and competencies

Requirements

• Minimum 1 year of experience in application penetration testing

• Practical knowledge of testing web, mobile, API, or thick-client applications

• Knowledge of common application vulnerabilities, including OWASP Top 10

• Practical experience with tools such as Burp Suite, OWASP ZAP, or similar

• Ability to analyze source code and use AI tools plus manual techniques to identify and verify vulnerabilities

• Ability to identify vulnerabilities, assess risk, and prepare reports

• English proficiency for reading and creating technical documentation and communicating with clients

• Ability to communicate independently and clearly with clients across all test stages

Benefits

• Hybrid or remote work model

• Ongoing professional development with funding for postgraduate studies, language courses, and exam preparation

• Broad training package (Degreed, Pluralsight, LinkedIn Learning, technical training, and certified Microsoft training)

• Buddy support and a referral program

• Cafeteria benefits and wellbeing support

• Private medical care, additional insurance, and support for maintaining skills via industry events

• Team trips and integration meetings, volunteer days, and holiday gifts/bonuses