Senior Cybersecurity Penetration Tester

About the role

As a Senior Penetration Tester you will lead offensive security assessments across modern web applications, APIs and cloud‑native environments, helping engineering teams embed security by design.

Key responsibilities

• Plan, scope and execute comprehensive penetration tests on web applications, micro‑services, REST/GraphQL APIs and cloud platforms (AWS, Azure, GCP).
• Collaborate with development and DevOps teams early in the design phase to perform threat modeling and architecture reviews.
• Perform deep‑dive manual and automated vulnerability analyses, uncovering complex flaws such as business‑logic bypasses and server‑side request forgeries.
• Produce high‑quality technical reports that translate risks into clear business impacts and provide pragmatic remediation guidance.
• Develop custom testing scripts and explore AI‑assisted security testing and LLM‑augmented vulnerability analysis.

Required profile

• Degree in Computer Science, Cybersecurity, IT or equivalent practical experience.
• At least 3 years of hands‑on experience conducting security assessments of web applications, APIs and cloud infrastructure.
• Strong analytical, problem‑solving and communication skills in English.
• Curious, continuous learner with a passion for offensive security and mentoring others.

Required skills

• Offensive tools: Burp Suite Pro, OWASP ZAP, Postman.
• Scripting: Python, Bash.
• Cloud platforms: AWS, Azure, GCP (including IAM and container security).
• Container technologies: Docker, Kubernetes.
• Security standards: OWASP Top 10, ASVS, WSTG, OAuth 2.0.

What we offer

• Flexible hybrid work conditions.
• Health insurance, on‑site medical office and wellness programs.
• Training opportunities, certifications and language courses.
• Career progression and continuous professional development.
• Access to discounts on Bosch products, sports activities and flexible benefits platform.