Pentester

**Czym będziesz się zajmować?** Our Penetration Testing practice delivers offensive security engagements for clients across financial services, technology, healthcare, government, and critical infrastructure. you sit at the intersection of hands-on testing and engagement delivery: you'll personally lead technical assessments across web, network, mobile, and Active Directory environments, while also owning scoping, quality, reporting, and client relationships, and coaching the consultants and analysts working alongside you. **Key Responsibilities** * Manage assigned engagements from initiation through reporting and closure. * Act as the primary point of contact for clients during testing activities. * Review and quality-assure technical findings and reports. * Assist with scoping, estimation, and proposal development. * Present findings to both technical and non-technical stakeholders. * Contribute to internal methodology, tooling, playbooks, and knowledge-sharing. * Support business development: assist with proposals, scoping calls, effort estimation, and pre-sales technical input. * Help uphold delivery standards aligned to recognized frameworks **Kogo poszukujemy?** **Required Qualifications** * 5+ years of hands-on penetration testing / offensive security experience, ideally including consultancy or multi-client delivery. * Demonstrable depth across at least three of: web application, network (internal/external), mobile, and Active Directory testing. * Strong command of industry-standard tooling: Burp Suite, Nmap, Metasploit, BloodHound/SharpHound, Impacket, CrackMapExec/NetExec, Cobalt Strike or equivalent C2, Nessus/OpenVAS, mobile tooling (Frida, MobSF, objection), etc. * Solid grounding in networking, operating system internals (Windows and Linux), authentication protocols, and common exploitation and post-exploitation techniques. * Scripting/automation ability in Python, PowerShell, and/or Bash. * Excellent report-writing and communication skills able to explain complex technical risk to non-technical audiences. * Experience managing client relationships and/or leading small delivery teams or workstreams.  **Certifications - Required at least one of:** * OSCP (Offensive Security Certified Professional) * CREST CRT / CPSA, with CCT (App or Infra) strongly preferred * CRTP / CRTO **Czego wymagamy?** 4 lata doświadczenia na podobnym stanowisku Znajomości: * Penetration testing * PowerShell * Python Języki: * Polski * Angielski **Jakie warunki i benefity otrzymasz?** * 20.2k–27.7k PLN netto/m (B2B) * B2B - Elastyczne godziny pracy (100%) * Praca zdalna: W całości **Kim jesteśmy?** Firma apreel powstała w kwietniu 2010 roku. W miarę rozwoju firmy i równolegle ze wzrostem poziomu zaufania klientów, jej działalność poszerzyła się o usługi Outsourcingu Specjalistów IT. Dziś to właśnie ten obszar stanowi główny filar działalności apreel.