> Markdown version of [/jobs/ext/4037573-penetration-tester](https://www.wearedevelopers.com/jobs/ext/4037573-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Andersen Software
- **Location:** Austria (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Apple IOS, Software System Penetration Testing, Microsoft Azure, Bash Shell, Burp Suite, Mobile Application Software, Python (Programming Language), Nmap, Open Web Application Security, Windows PowerShell, Web Applications, Scripting, Cloud Platform System, GWAPT, Metasploit, Api Management
- **Published:** October 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=d3273e81e50de592

## About the Role

* Experience in cybersecurity for 5+ years, including 3+ years in hands-on penetration testing.
 * Experience with web application and API testing according to OWASP (Top 10, WSTG, ASVS).
 * Experience conducting internal and external infrastructure testing, including Active Directory attacks
 * Working knowledge of standard tools (Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket, etc.).
 * At least one recognized hands-on certification: OSCP, OSWE, OSEP, CRTO, eWPTX, GPEN or GWAPT.
 * Clean professional records and willingness to undergo background verification.
 * Level of English - from Upper-Intermediate and above.

Desired skills

 * Hands-on experience with cloud penetration testing (Azure, Microsoft 365, AWS).
 * Experience with mobile application testing (Android, iOS).
 * Red Teaming or Purple Teaming experience, including familiarity with C2 frameworks.
 * Strong scripting and security tooling skills (Python, PowerShell, Bash).
 * Experience with PTES, OSSTMM or NIST SP 800-115 methodologies.
 * Proven security research track record, such as published CVEs or recognized bug bounty findings.

## Description

* Planning and performing penetration tests of web applications, APIs, internal and external networks, Active Directory and cloud environments.
 * Carrying out manual testing beyond automated scanning, including exploitation and privilege escalation within the agreed rules of engagement.
 * Validating findings, assessing business risk and producing clear technical and executive reports.
 * Presenting results to system owners and management, and supporting remediation and retesting.
 * Contributing to red teaming or purple teaming exercises with SOC and detection teams.
 * Maintaining testing methodologies, tools and templates.