Penetration Tester

We are looking for a skilled Penetration Tester to join our Products & Tech department at Better Collective. As a Penetration Tester, you will be responsible for identifying and addressing potential security vulnerabilities in our systems and applications.

JOB DESCRIPTION

• Penetration testing of websites owned and operated by Better Collective. Most are WordPress applications with 3rd party plugins and themes and some in-house built assets as well.
• Occasional assistance with other security tasks (incident response, automated vulnerability assessments…)
• Assess physical security and procedural risks as part of the comprehensive testing approach.
• Stay updated with the latest industry trends, threats, and vulnerabilities.

BENEFITS:

• Private health insurance
• Sick leave 100% paid
• Canteen with free meals and drinks
• Flexible working hours
• Additional vacation days after two years in the company

We also provide up-to date equipment, entertainment facilities in a modern office right in the city center, company parties, yearly trip out of town, holiday presents and more.

Note: Flexible working hours and occasional work from home options in Better Collective help us achieve proper work-life balance. We strongly believe in the magic of teamwork, though, so we come to the office at least twice a week to keep the team spirits high.

APPLICATION DEADLINE
We look forward to hearing from you and accept applications until 31st of July.
Please submit your CV and cover letter in PDF; only applications submitted in English will be considered.

Expected start date: as soon as possible.

Requirements

• Proven penetration testing track record, especially of WordPress applications. This can be in the form of current/former work as a pentester, hacking platforms such as HackerOne, BugCrowd, TryHackMe, HackTheBox, etc.
• Ability to perform white box pentesting in, at least, PHP and/or JS.

NICE TO HAVE

• Besides PHP and/or JS knowledge, programming experience with .NET, Java and/or Swift are welcome
• BSc in computer science or other related field; penetration testing certification(s) (eWPTX, OSWE, …); awarded bug bounties.