Penetration Tester

Sopra Steria is one of the largest players in the tech industry in Europe, known for its consulting, digital services and software development. We operate in nearly 30 countries in the world, hiring more than 55,000 employees.
The Polish branch, as the Global Delivery Center, operates in Katowice since 2007 and has been growing ever since. Currently, our team consists of around 1,000 specialists.

Within the Digital Platform Services department, our teams specialize in areas such as cloud, operating systems, virtualization, databases, backup or storage, as well as networking and security. We also have 1st line support consultants who speak French and English, but also Italian, Spanish, Portuguese and German.

The Application Services department is responsible for areas such as software development, data engineering, testing services, CRM, ITSM and ERP platform integrations, as well as application management for customers in Scandinavia, Benelux, France, Germany, Switzerland and the UK.

We are looking for Penetration Tester to join Sopra Steria Polska for a team that works on the project in the automotive sector.  As a member of an international team, you will support internal and external processes and conduct penetration tests mainly on web applications.

Note that we can only offer cooperation to people who are located in Poland and have EU citizenship.

Responsibilities:​

• Maintain regular contact with the Test Coordinators assigned to specific application, including organizing and conducting KickOff meetings.
• Verify application availability of applications and login details.
• Conducting tests: penetration tests (mainly on web applications), rich client’s applications, SAP system, mobile apps, infrastructure and others.
• Preparing reports.

Tech stack on the project:​

• Rich clients,
• SAP,
• Mobile,
• Web applications and other.

Must have requirements:​

• Professional certifications: OSCP Certified Professional or OSCE Certified Expert or OSEE Exploitation Expert or eCPTX or GXPN or other similar is highly desirable.
• Minimum 2 years of experience with hands-on experience in technical security checks of
  • Infrastructures and Web applications / Web services and
  • Infrastructures of SAP Infrastructures, applications, and services.
• Minimum 1 year of experience with hands-on experience in Reverse-Engineering of
  • Rich /Fat / Smart Clients, e.g. .Net/Java appl. or PE-Executables
  • iOS / Android Apps.
• EU citizenship.
• Fluent English B2/C1.
• Being open to occasional business trips abroad and visits in our office in Katowice.

What we offer:
• BENEFITS (UoP): Luxmed, Medicover Sport, Worksmile, educational platforms, languages learning platform, referral bonus, copyrights, life insurance, workation
• DEVELOPMENT OPPORTUNITIES (UoP and B2B): certifications (paid by the company), conferences, Tech Lunches, possibility to join our Communities (Project Management, Architecture, Security, Process Management, Leadership, AI and Cloud)

The recruitment process for this position consists of three stages::

• a short phone call with a recruiter (30 min max)
• one-hour long interview on Teams (with both general and technical questions)
• interview with clients’ representative

Salary range: 

Regular: UOP: 8 000-11 000 PLN gross/month; 
Senior: UOP: 12 000 -16 000 PLN gross/month;  B2B: 100-140 PLN/h net + vat.

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.