Penetration Tester (Mid+/ Senior)

• Independently own and deliver Red Team engagements end-to-end (planning, execution, reporting, client delivery).
• Take on complex projects across Mobile, Desktop and IoT
• Develop custom implants, beacons and exploits for Windows/Mac when engagements require it.
• Create detailed reports explaining technical and logical findings, business risk and prioritized recommendations.
• Share expertise: run lessons-learned, internal lectures and knowledge sharing
• Act as a role model by example - take the initiative, dig in, take ownership.
• Collaborate closely with the team and contribute to continuous improvement of teampentest capabilities.
• Think outside the box and simulate real adversarial approaches.

What we offer:

• Growth, really fast growth
• Good salary + really challengeable projects
• Brilliant Team
• Flexible working hours
• Paid vacation and sick-leaves
• Internal training and workshop (conferences, workshops, training, etc.)
• English courses
• Work-rest balance support ( foosball, workout station)

We are looking for bright and self-motivated individuals to join our technical team. Someone who is passionate about Security as we are., * Red Team (core): hands-on experience with C2 frameworks; base in exploit development and writing implants/beacons for C2.

• Deep Internal / Active Directory penetration testing.
• OPSEC techniques and understanding of how SOC and defensive mechanisms work - and how to evade them.
• Mobile, Desktop, IoT (willing to cover): general testing techniques; understanding of Windows/Linux/MacOS/iOS/Android internals and system-level vulnerabilities; for IoT - protocols plus basic hardware skills (disassemble a board, solder).
• Cloud: understanding of cloud infrastructure, privileges and related attack vectors.
• Business-logic vulnerabilities: proven experience and breadth in finding non-standard logic flaws.
• Deep adoption of AI tooling (own setups, MCP; AI integrated into the workflow - not surface-level use).
• English sufficient to independently present a report to the client and answer questions.
• Web is not the core focus but assumed by default at this level.

Preferred Experience: OSCP / CRTO / OSEP or other related offensive-security certifications; ability to code in Python, C/C++, .NET or similar.

UnderDefense is a fast-growing company that safeguards businesses around the globe from cybersecurity threats. We are a globally top-ranked firm by Gartner and Clutch, provide cyber resiliency consulting and technology-enabled services to anticipate, manage and defend against cyber threats. We empower clients to predict, prevent, detect, and respond to threats. We work with 122 clients in more than 20 countries. We have already detected 38K vulnerabilities before hackers tried to exploit them. We are passionate about making the Internet a Safer to people and businesses.