Penetration Tester - WebAPP and API

PEOPLEMORE P.S.A. is a technology-driven company that builds comprehensive digital projects for clients worldwide. We are currently seeking an experienced Penetration Tester to join our team and focus on securing WebAPP and API solutions through advanced security assessments.

Key responsibilities

• Lead end-to-end penetration tests and conduct remediation retests.
• Perform advanced Active Directory assessments, including privilege escalation and attack path analysis.
• Develop custom scripts and Proof of Concept exploits using Python, PowerShell, or Bash.
• Manage security engagements from initial scoping and estimation through to final reporting.
• Communicate complex security risks and recommendations to both technical and non-technical stakeholders.

Requirements

• Minimum of 4 years of hands-on offensive security experience in a consultancy or multi-client environment.
• Strong expertise in at least three areas: web/API, network, mobile, or Active Directory testing.
• Advanced proficiency with industry-standard tools such as Burp Suite, Metasploit, Cobalt Strike, and BloodHound.
• Possession of at least one recognized certification, such as OSCP, CRTP, CRTO, or CREST.
• Excellent communication skills in English and Polish, with the ability to create high-quality technical reports.

What we offer

• A fully remote working environment with international project exposure.
• Support for professional development, including conference participation and publication opportunities.
• Private medical care and a sports card for all team members.
• A transparent, developer-friendly culture where direct communication with leadership is encouraged.
• Access to challenging, diverse projects with the flexibility to rotate tasks if you seek new experiences.