Senior Penetration Tester (On-Demand), Czech based

We are looking for an experienced Penetration Tester to support cybersecurity testing activities. The ideal candidate is a seasoned, hands-on security professional with a strong technical background and extensive practical experience in penetration testing.

The cooperation will be organized on project-based, on-demand basis, with assignments scheduled according to actual business needs. This is not a full-time position, and no fixed weekly workload is required.

The initial scope includes penetration testing of Microsoft Azure infrastructure and PCI DSS-related environments, with the possibility of additional assignments in the future.

Details

• Contract: B2B
• Engagement: On-demand / Ad hoc / Project-based
• Workload: Flexible, depending on individual assignments
• Location: Czech Republic, remote cooperation
• Duration: Long-term cooperation, with individual assignments agreed separately
• Language: Czech, English

Responsibilities

• Perform penetration testing of Microsoft Azure cloud infrastructure and related services
• Conduct penetration testing of systems and environments within PCI DSS scope
• Identify security vulnerabilities, misconfigurations and potential attack vectors
• Execute manual and automated security testing using established penetration testing methodologies
• Assess the severity and potential business impact of identified vulnerabilities
• Prepare structured penetration testing reports, including findings, risk assessments and remediation recommendations
• Communicate findings and provide technical guidance to internal security and infrastructure teams
• Perform remediation verification and retesting when required

Requirements

• Proven professional experience in penetration testing and offensive security
• Strong hands-on technical background in infrastructure, network and application security testing
• Practical experience with Microsoft Azure security assessments and penetration testing
• Experience performing penetration tests in PCI DSS-regulated environments
• Solid understanding of networking, operating systems, authentication mechanisms and common security vulnerabilities
• Proficiency with penetration testing tools such as Burp Suite, Nmap, Metasploit, Nessus or similar
• Ability to conduct manual security testing beyond automated vulnerability scanning
• Experience producing professional penetration testing reports with actionable recommendations
• Ability to work independently and take ownership of individual testing assignments
• English communication skills

Nice to Have

• OSCP, OSCE, GPEN, CREST or similar security certifications
• Background in red teaming, infrastructure security or security consulting
• Previous experience providing independent penetration testing services to enterprise clients.