Penetration Testing Engineer/ 1

Inetum Polska is part of the global Inetum Group and plays a key role in driving the digital transformation of businesses and public institutions. Operating in cities such as Warsaw, Poznan, Katowice, Lublin, Rzeszow, Lodz the company offers a wide range of IT services. Inetum Polska actively supports employee development by fully funding training, certifications, and participation in technology conferences. Additionally, the company is involved in local social initiatives, such as charitable projects and promoting an active lifestyle. It prides itself on fostering a diverse and inclusive work environment, ensuring equal opportunities for all.

Globally, Inetum operates in 19 countries and employs over 28,000 professionals. The company focuses on four key areas:

• Consulting (Inetum Consulting): Strategic advisory services that help organizations define and implement innovative solutions.
• Infrastructure and Application Management (Inetum Technologies): Designing and managing IT systems tailored to clients’ individual needs.
• Software Implementation (Inetum Solutions): Deploying partner solutions from industry leaders like Microsoft, SAP, Salesforce, and ServiceNow.
• Custom Software Development (Inetum Software): Creating unique software solutions to meet specific client needs.

With strategic partnerships with major technology giants, including Microsoft, SAP, Salesforce, and ServiceNow, Inetum delivers advanced technological solutions tailored to customer requirements. In 2023, Inetum reported revenues of €2.5 billion, underscoring its strong position in the digital services market.

Inetum distinguishes itself by offering a comprehensive range of benefits that meet the diverse needs of employees, providing flexibility, support and commitment. Here's what makes working at Inetum unique:

Flexible and hybrid work:

• Flexible working hours.
• Hybrid work model, allowing employees to divide their time between home and modern offices in key Polish cities.

Attractive financial benefits:

• A cafeteria system that allows employees to personalize benefits by choosing from a variety of options.
• Generous referral bonuses, offering up to PLN6,000 for referring specialists.
• Additional revenue sharing opportunities for initiating partnerships with new clients.

Professional development and team support:

• Ongoing guidance from a dedicated Team Manager for each employee.
• Tailored technical mentoring from an assigned technical leader, depending on individual expertise and project needs.

Community and Well-Being:

• Dedicated team-building budget for online and on-site team events.
• Opportunities to participate in charitable initiatives and local sports programs.
• A supportive and inclusive work culture with an emphasis on diversity and mutual respect.

We are seeking a highly skilled and experienced Senior IT Support Engineer specializing in Offensive Security to join Information Security team. The ideal candidate will have a strong background in penetration testing, security assessments, and infrastructure security audits. This role involves identifying architectural weaknesses, planning and executing penetration tests, and conducting comprehensive security reviews across various environments.

Key Responsibilities:

1. Penetration Testing & Security Assessments:

   • Conduct penetration tests of internal infrastructure, environments, and Internet-facing web applications.
   • Perform authentication, authorization, business logic, and API security assessments.
   • Identify, validate, and document security vulnerabilities based on industry standards such as OWASP Top 10 and MITRE ATT&CK.

2. Infrastructure Security Audits:

   • Assess network, system, and application security controls.
   • Conduct security reviews of cloud-native and distributed architectures, in-house cloud architectures, and physical security of company sites.
   • Audit complex enterprise infrastructures including Kubernetes environments, OpenStack platforms, Apache Kafka ecosystems, Active Directory, Microsoft Entra ID, WAN and LAN network infrastructures, Linux and Windows server environments, and hybrid cloud and on-premise architectures.

3. Reporting & Documentation:

   • Report and present findings, risk assessments, and remediation recommendations to technical and management stakeholders.
   • Document penetration tests, security assessments, and audit results.

4. Red Team Engagements:

   • Plan and execute internal red team engagements simulating realistic threat actor behavior.
   • Conduct attack path analysis, privilege escalation assessments, social engineering, credential compromise, and lateral movement scenarios.

5. Security Improvement & Collaboration:

   • Support remediation activities and security architecture improvements.
   • Collaborate with system owners, platform teams, and developers to address identified weaknesses.
   • Participate in security architecture reviews and technical design discussions.
   • Work closely with IT, network, and application teams to identify security gaps and recommend improvements.

6. Methodology & Tooling Development:

   • Develop and maintain testing methodologies, attack playbooks, and automation scripts.
   • Contribute to the continuous improvement of offensive security capabilities and tooling.

7. Compliance & Awareness:

   • Support compliance requirements such as ISO 27001, NIS2, and industry-specific security frameworks.
   • Provide technical expertise for security-related projects and initiatives.
   • Contribute to security awareness by sharing attack techniques, lessons learned, and best practices

• Degree in Computer Science, IT Security, or a comparable qualification.
• Several years of experience in Information Security, Offensive Security, Penetration Testing, or Red Teaming.
• Hands-on experience conducting penetration tests against heterogeneous Enterprise Infrastructure environments, including:
  • Active Directory Security/Microsoft Entra ID
  • Network - LAN/WAN/WLAN
  • Windows, Mac, and Linux
  • Web Applications (In-House and public-facing)
  • APIs
  • (In-House) Cloud Security (OpenStack, Kubernetes, containerized environments)
  • Cloud Security (AWS, Azure, M365)
• Strong understanding of modern attack techniques and adversary tactics.
• Practical knowledge of common penetration testing methodologies and frameworks.
• Strong analytical skills and problem-solving abilities.
• Experience creating technical reports and presenting findings to stakeholders.
• Team player with good communication skills.

Hybrid work model: 3 days from the office, 2 days of home office.

Office locations: Warszawa, Poznan, Lublin

During employment, we conduct a background check

Fluent communication skills in English and Polish (minimum B2 level), both written and spoken.

We hereby inform you that Inetum Polska sp. z o.o. has implemented an internal reporting (whistleblowing) procedure. The content of the procedure and the possibility to submit an internal report are available at:

https://inetum.whispli.com/speakup?locale=pl