We are looking for a highly experienced Senior Penetration Tester with expertise in both infrastructure and application security testing. You’ll work on diverse penetration testing assignments, from Windows/Linux systems and APIs to microservices, cloud, and ICS/SCADA environments. Your mission: identify vulnerabilities, detect design flaws, and validate both technical and business controls in complex and critical infrastructures.

This is a senior role for a trusted professional who thrives on challenging environments and brings deep expertise across offensive security, cloud, and secure application development.

What You’ll Do

• Perform penetration testing on infrastructure, applications, and APIs, covering on-prem, cloud, and hybrid environments.
• Execute scenarios in white-box, grey-box, and black-box modes (internal and external perspectives).
• Assess Windows, Linux, Solaris, and cloud systems (Microsoft stack, hybrid topologies).
• Evaluate microservices, enterprise service bus architectures, APIs, and middleware.
• Pen test proprietary and industrial systems, including ICS and SCADA.
• Identify vulnerabilities, design flaws, and business process weaknesses (e.g. fraud prevention measures).
• Apply a broad range of techniques: from cautious reconnaissance to aggressive exploitation, always within approved scope.
• Document and report findings in a clear, professional way, with actionable remediation advice.
• Collaborate with security, architecture, and development teams to raise overall cyber resilience.