Penetration Tester (DevOps Security)

About the role

We are looking for a highly skilled Penetration Tester who also has strong DevOps expertise. In this position you will go beyond delivering static vulnerability reports – you will embed security testing, automated scanning, and protective guardrails directly into our CI/CD pipelines.

Key responsibilities

• Perform comprehensive penetration testing on web applications, mobile apps, APIs, cloud infrastructure, and network architecture.
• Design, build, and maintain automated security testing gates (SAST, DAST, SCA, container scanning) within CI/CD pipelines.
• Integrate security testing, automated scanning, and guardrails into continuous integration and deployment processes.
• Develop realistic attack simulations and red‑team exercises to validate defenses.

Required profile

• Ethical‑hacker mindset combined with a DevOps engineering discipline.
• Strong analytical and problem‑solving abilities.
• Comprehensive understanding of cybersecurity principles and best practices.
• Relevant certifications such as CEH, OSCP, or CISSP are a plus.

Required skills

• Application security and vulnerability identification.
• Reverse engineering and malware analysis.
• Red teaming and realistic attack simulation.
• SAST, DAST, SCA, and container scanning.
• CI/CD pipeline integration (e.g., Jenkins, GitLab, Azure DevOps).