Penetration Tester
- Full-time, permanent
- Hybrid, project-dependent
- Sofia, Bulgaria
- Senior-level
Experience: Proven testing experience
About SoCyber
SoCyber is a Bulgarian cybersecurity company on a mission to solve complex cybersecurity problems and help organizations across all industries and sizes fortify their cybersecurity defenses. We provide a wide range of security, compliance and vulnerability management solutions.
Our passionate team of experts is working on projects covering the full spectrum of digital and physical infrastructure. SoCyber is partnered with leading organizations worldwide, offering you the chance to learn from seasoned professionals and make a real difference in the fight against cyber threats.
About the role
As part of our security team you will test the full spectrum of digital and physical infrastructure for leading organizations worldwide. We are a tight-knit, supportive team that values continuous learning, real impact, and technical excellence.
Responsibilities
- Perform penetration testing across web, API, mobile, thick-client apps, networks, and systems
- Identify vulnerabilities and provide actionable remediation guidance
- Deliver clear, high-quality reports for technical and non-technical stakeholders
- Contribute to improving internal methodologies and services
What we are looking for
- Proven penetration testing experience (web, API, mobile, and more)
- Strong grasp of operating systems, networking, and frameworks (OWASP, PTES, MITRE ATT&CK)
- Scripting or programming for automation and tooling
- Relevant certifications (OSCP, CREST CRT, OSWE, or similar)
- English at B1 or higher, for international collaboration
Nice to have
- Cloud security experience (AWS, Azure, hybrid environments)
- Source code review skills
- Social engineering experience
- An R&D mindset: tooling, research, and training
Not quite your role? We still want to hear from you.
Send us a note about what you do and the kind of work you want. The best people rarely fit a job ad.