Mid-Level Penetration Tester – Cyber Testing Center

About the role

The Cyber Testing Center (CTC) is looking for a mid‑level Penetration Tester to help secure NN’s digital landscape. You will hunt for vulnerabilities across web, mobile and infrastructure, champion secure‑by‑design practices, and share cutting‑edge tools with development teams.

Key responsibilities

• Perform DAST, SAST and IAST assessments against OWASP ASVS and MASVS standards.
• Conduct infrastructure security assessments, including configuration reviews.
• Deliver workshops and training sessions for developers and infrastructure teams.
• Provide remediation recommendations to clients and support responsible disclosure programs.
• Research, prototype and build new security tools, including projects that leverage Large Language Models.
• Contribute to internal initiatives that expand testing coverage using AI/LLM technologies.

Required profile

• Strong IT background with 2‑5 years of hands‑on penetration testing experience.
• Practical experience in web development technologies such as .NET, Java, Python and shell scripting.
• Experience testing mobile applications on iOS and Android platforms.
• Familiarity with security testing of AI/LLM solutions.
• Excellent communication skills for teaching, writing guidelines and explaining findings to developers.
• Continuous learning mindset – staying up‑to‑date with security trends, CTF labs and new pentesting techniques.

Required skills

• DAST
• SAST
• IAST
• OWASP ASVS
• MASVS
• .NET
• Java
• Python
• Shell scripting
• System administration
• iOS
• Android
• AI
• Large Language Models (LLM)
• Infrastructure security assessment

What we offer

• Real cybersecurity work on production systems, not just simulations.
• Support for certifications, training, conferences and continuous development.
• Hybrid work model with a strong home‑office culture and flexible time off.
• Company laptop, iPhone, cafeteria benefits up to 20,000 CZK and pension contributions.