Penetration Tester (1 year contract)

Strategic Staffing Solutions International client is a leading global financial services company providing investment banking, Global Market and investment management services to a substantial and diversified client base that includes corporations, financial institutions, governments, and high-net-worth individuals. The company is headquartered in New York and maintains offices in London, Frankfurt, Tokyo, Bengaluru, Hong Kong and other major financial centers around the world.

Competitive Salary – Gross salary up to 24,200 PLN / B2B 200 PLN/hour based on experience.

International Environment – Work with a professional team in a dynamic, global setting.

Growth & Development – Access to top-tier training and career advancement opportunities.

Premium Workspace – High-end office in the heart of Warsaw.

Onsite Work Model – Collaborate closely with your team in a stimulating office environment.

Flexible Contract – 1 year contract.

Role Summary

As a Penetration Tester in the global Penetration Testing Team, you will identify vulnerabilities in applications, infrastructure, and cloud environments. You will conduct security assessments—often as a solo tester—on newly developed or updated systems and engage with development teams to drive remediation and long-term improvements.

Key Responsibilities

• Conduct manual and automated penetration tests on web applications, infrastructure, and cloud systems.
• Independently execute 1–2 week testing engagements, from scoping through to debrief.
• Perform detailed source code reviews to supplement dynamic testing and validate findings.
• Interact with application owners (developers, product teams) to scope assessments and deliver results.
• Analyze complex systems, identify security flaws, and escalate issues requiring remediation.
• Collaborate with teams to recommend mitigations and systemic security improvements.
• Share insights and expertise with internal security and engineering teams.
• Contribute to a strong internal testing community by mentoring others and developing shared resources.

Skills & Experience Required

• Proven experience in application-level and infrastructure penetration testing.
• Strong understanding of web security fundamentals (e.g., OWASP Top 10, authentication flaws, injection issues).
• Ability to build exploit chains and articulate the business impact of vulnerabilities.
• Proficiency in one or more programming languages (e.g., Java, JavaScript, Python, C++, C#).
• Experience with both dynamic and static analysis, including reverse engineering and fuzzing.
• Familiarity with key tools: Burp Suite, Wireshark, netcat, Ghidra, etc.
• Sound knowledge of the TCP/IP stack and major network protocols.
• Ability to produce clear, actionable reports and communicate technical concepts to diverse stakeholders.

Preferred Qualifications

• Experience developing or customizing proof-of-concept exploits.
• Understanding of modern cloud platforms (e.g., AWS, GCP, Azure) and cloud security concepts.
• Bachelor’s degree in Computer Science, Cybersecurity, or related technical field.
• Relevant certifications such as OSCP, OSEP, OSWP, or equivalent experience.
• Background in related disciplines: cloud security, network/device administration, or secure software development.