Penetration Tester / Application Security Engineer Job at Realign (Monterrey)

Application Penetration Tester

We are looking for security engineer who loves solving interesting problems and ...

Location

Poland , Warszawa

Salary:

Not provided

Robert Bosch Sp. z o.o.

Expiration Date

Until further notice

Requirements

Minimum 5 years of combined experience in penetration testing and security engineering roles
Professional certifications such as OSCP, CEH, CISSP, CISM, or equivalent
Advanced level of understanding of OWASP Top 10, CVE, general security controls, and other foundational topics such as the latest web application system exploits
Attacker mindset for breaking the websites with practical knowledge of OWASP
Commanding knowledge of VAPT concepts and best practices, including the requirements for WhiteHat/ethical hacking
Expert understanding of the difference between a vulnerability assessment and a penetration test in the context of assessment scope, objectives, and deliverables
In depth experience with common automated VAPT tools such as Nessus, Burp Suite
Proficiency with other common attack tools and frameworks such as Wireshark, Kali, Metasploit, etc.
Working knowledge of DevSecOps, CIS Security benchmarks, scripting languages (Python, PowerShell, Bash) for automation
Fluent English (both verbal and written)

Job Responsibility

Black-box and Grey Box penetration test applications
Security testing including reverse engineering of Mobile applications (Android and iOS)
Create innovative attacks tools/automations for project specific needs
Communicate complex vulnerability results to technical and non-technical audience
Perform research and contribute to open-source community on new attack methodology, vulnerability findings
Scope penetration tests and contribute to penetration test project management

What we offer

Competitive salary + annual bonus
Hybrid work with flexible working hours
Referral Bonus Program
Copyright costs for IT employees
Private medical care and life insurance
Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinema tickets, etc.)
Prepaid Lunch Card
Number of benefits for families (for instance summer camps for kids)
Non-working day on the 31st of December

Fulltime

Principal Security Engineer

We’re looking for a principal Security Testing Engineer to work closely with the...

Location

India , Bengaluru

Salary:

Not provided

Atlassian

Expiration Date

Until further notice

Requirements

6+ years penetration testing experience in a consultancy, dedicated internal pentesting team, or similar offensive security function
2+ years experience as an offensive security team lead
Strong experience in white-box application security testing
Full stack application security technical experience
Delivery focused
Experience mentoring junior penetration testers
The ability to complete a penetration test and code review of a modern cloud application
Experience leading security teams on complex penetration testing engagements
Strong, practical understanding of security testing methodologies, supporting infrastructure requirements and legal considerations
Strong collaboration and communication skills when working with closely with deeply technical development and infrastructure teams

Job Responsibility

Providing SME knowledge and guidance to a team of pen testers/code review
Continuing to mature pen testing/code review workflows
Identifying and recruiting top-class penetration testing talent
Supporting and guiding the growth of a India based penetration testing team
Analysing vulnerability data for trends and gaps in controls
Identifying significant vulnerabilities in Atlassian products prior to production deployment
Building contacts in the Atlassian engineering team, product team and security team
Building and leveraging existing contacts to identify potential talent to join the team
Establishing testing processes in the local team that complements and extends existing processes
Identifying insights which contribute to strategic investments

What we offer

health and wellbeing resources
paid volunteer days

Fulltime

Senior Security Engineer

PagerDuty is seeking a Senior Security Engineer to join our diverse, customer-fo...

Location

Canada , Toronto

Salary:

137000.00 - 207000.00 CAD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

Proficiency with Application & Product Security typically associated with 4 - 5 years of experience in a Security Engineering role working with a cloud-native, microservices environment, preferably AWS
Familiarity with cloud-native product technologies including: Vulnerability detection via multiple approaches including SAST, DAST, SCA, and runtime (e.g., Qualys/Nessus, Wiz, Snyk, GHAS, Semgrep, etc.)
CI/CD technologies and integrations (e.g., CircleCI, Buildkite, Helm, Terraform, Chef)
Product security event logging standards and analysis tools (e.g., SIEM such as: SumoLogic, LogRythm, or Splunk, etc.)
Security Incident Response & Risk Management processes and tools
Proficiency in at least one programming language and framework (e.g. Python, Bash, Phoenix/Elixir, Java, Ruby on Rails), typically associated with 3 - 4 years of experience with the language/framework
Have exceptional written, oral communication, and interpersonal skills
Organizational skills with the ability to successfully manage multiple priorities and deadlines

Job Responsibility

Embrace the role of hands-on technical lead in defining product security standards and guiding platform protections
Establish criteria and conduct comprehensive security reviews throughout all stages of product development to identify and address security risks
Perform regular threat assessments, coordinate with third-party testers for penetration testing, and conduct internal penetration testing to identify and mitigate security risks
Mentor and guide team members to ensure product and business objectives are prioritized in project implementations, fostering a strong documentation culture with project charters and design documents
Work with loosely defined requirements where you exercise your analytical skills to clarify questions, share your approach, and collaborate with the team to design and implement effective security frameworks. Maintain a strong appetite for challenging problems with a high degree of ownership
Participate in the team’s On-Call rotation, triaging and addressing security issues as they arise, and implement measures to prevent future occurrences
Enable service team security implementations by developing security-as-code constructs, including infrastructure-as-code (IaC) modules, libraries and frontend components, while creating and maintaining developer-focused documentation to promote easy adoption
Establish and uphold baseline standards and hardened configurations for platform components
Continuously enhance security frameworks by focusing on product security standards and software supply chain protections, tailored for application security in cloud-native, microservices environments

What we offer

Competitive salary
Comprehensive benefits package from day one
Flexible work arrangements
Company equity
ESPP (Employee Stock Purchase Program)
Retirement or pension plan
Generous paid vacation time
Paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent (some countries have longer leave standards and we comply with local laws)

Fulltime

Product Security Engineer

At Atlassian, we're motivated by a common goal: to unleash the potential of ever...

Location

United States , San Francisco

Salary:

150700.00 - 206000.00 USD / Year

Atlassian

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Cybersecurity or related field
24 months of experience working as Application Security Engineer, Product Security Engineer, or Penetration Tester
experience in application security tooling such as BurpSuite Pro, Postman, Docker, Command Line Interface (CLI) tools, Nmap, and Metasploit
understanding and coding common programming languages such as Java, Python, or Go
penetration testing, vulnerability assessment, composing and generating vulnerability reports
administering and managing Jira project
data analysis and data visualization tooling such as Tableau and Databricks
code versioning tools such as Bitbucket Cloud and GitHub
must pass technical interview

Job Responsibility

Evaluate submissions from security researchers to bug bounty program, assess the impact of each vulnerability, and communicate with the researcher community to help obtain additional details that may be helpful to engineering teams as they work to remediate the issues
drive improvement to the policies, processes, and automation to make bug bounty programs effective and ensure to get the most accurate information about each vulnerability to the proper engineering team as quickly as possible
work on vulnerability management improvements on processes, policies and standards
make sure the company's products and services are safe and secure, the internal vulnerability management workflow is accurate and up to date
identify vulnerabilities at scale and help engineering teams systematically remediate them
work on securing open-source supply chain
interact with some of the world’s leading security researchers through bug bounty program
build cutting edge tools to help identify and remediate vulnerabilities at scale
work with web application security and a strong ability to work with colleagues to develop and build solutions to help us scale in order to be successful in this role
read and write code

What we offer

health and wellbeing resources
paid volunteer days

Fulltime

Senior Penetration Tester

As a Penetration Tester, you'll conduct regular, comprehensive security assessme...

Location

Belgium , Brussels

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Minimum of 5 years' experience in one or more of the following areas: Penetration Tester, Red/Purple Team Member, Security Engineer
Knowledge of technologies up to system level (web frameworks, communications protocols, database systems)
Offensive security knowledge of cyber-attack techniques, vulnerabilities, and mitigation strategies
Knowledge of penetration testing tools, frameworks, and methodology
Skills using Kali Linux, Nmap, PowerShell, Metasploit, Cobalt Strike, OWASP ZAP, Burp Suite
Proficiency in scripting
Awareness of frameworks such as MITRE ATT&CK and NIST and how they can be applied effectively within an enterprise
Familiarity with the latest exploits, tactics, techniques, and procedures (TTP), vulnerability remediation and security trends
Cyber security qualifications from Offensive Security, SANS, Pentester Academy, CREST, eLearnSecurity or others

Job Responsibility

Scoping and executing of complex penetrations test across a wide scope of technologies, products, services, and applications and critical infrastructure companies
Helping the team to define and improve the internal security testing programme
Documenting technical issues both Cyber and IT related during testing assessments
Improve our monitoring services by working in purple style exercises and operating in a red team capacity to improve the ability to detect and respond to threats
Supporting incident response by providing context and expertise around cyber threats
Mentor to our junior & medior colleagues

What we offer

Extensive career development opportunities, both local and international
Part of a dynamic network of 56,000 professionals at all stages of their careers
Wide array of offices to explore

Fulltime

Product Security Engineer

Join Airtable as a Product Security Engineer and play a pivotal role in shaping ...

Location

United States , San Francisco; Seattle; New York City; Los Angeles

Salary:

170000.00 - 277000.00 USD / Year

Airtable

Expiration Date

Until further notice

Requirements

2+ years experience in product security and application security
Experience shipping production code
Skilled at conducting in-depth security reviews and collaborating with engineering teams
Proficient in writing clean, maintainable code
Hands-on experience with AI product security for LLM-powered products
Strong communicator and collaborator, able to drive security initiatives
Comfortable making systems as well as breaking them
Familiar with JavaScript or TypeScript, Node, Linux, and AWS or comparable technologies
Comfortable working in a fast-paced environment and contributing to long-term security strategy

Job Responsibility

Partner with product teams to review product plans, designs, and code for security considerations
Lead and implement programs that raise the bar for application and product security
Build and ship frameworks that make it easy for product engineers to ship secure code
Triage and drive remediation for findings from external penetration testers
Research emerging threats and evolving best practices, especially in AI and LLM safety
Work with advisors and third party vendors on penetration tests, security reports and compliance projects
Contribute to roadmaps, metrics and strategic planning for the product security team

What we offer

Benefits
Restricted stock units
Incentive compensation

Fulltime

Cloud Security Test Engineer

This role involves designing and executing complex penetration tests against clo...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

B.E / B.Tech / M.Tech / MCA in Computer Science or Information Technology
Minimum of 2 to 6 years penetration testing, with a strong focus on cloud environments
In-depth understanding of cloud technologies (AWS, Azure, GCP) and their security implications
Proficiency in advanced penetration testing tools and techniques, such as Burp, ZAP, Metasploit, Cobalt Strike, and PowerSploit
Experience with container technologies (Docker, Kubernetes) and serverless architectures
Strong scripting skills (Python, PowerShell) for automation and custom tool development
Experience with security orchestration, automation, and response (SOAR) platforms
Active security certifications such as OSCP, CSSLP or related is strongly desired
Ability to work well under minimal supervision
Requires strong interpersonal, organizational, written and verbal communication skills

Job Responsibility

Design and execute complex penetration tests against cloud-native applications, infrastructure, and data stores
Exploit vulnerabilities in cloud platforms, such as AWS, Azure, and GCP, using advanced techniques and tools
Assess the security posture of cloud-native applications, microservices, and serverless architectures
Develop and execute attack scenarios that simulate real-world threats, including supply chain attacks, privilege escalation, and lateral movement
Lead and mentor a team of experienced penetration testers, providing guidance and support on advanced techniques and tools
Assign tasks, review deliverables, and ensure project timelines are met
Develop and maintain standard operating procedures for complex penetration testing activities

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Cloud Automation Test Engineer

This role involves designing and executing complex penetration tests against clo...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Must have B.E / B.Tech / M.Tech / MCA in Computer Science or Information Technology
Must have a minimum of 2 to 6 years penetration testing, with a strong focus on cloud environments
In-depth understanding of cloud technologies (AWS, Azure, GCP) and their security implications
Proficiency in advanced penetration testing tools and techniques, such as Burp, ZAP, Metasploit, Cobalt Strike, and PowerSploit
Experience with container technologies (Docker, Kubernetes) and serverless architectures
Strong scripting skills (Python, PowerShell) for automation and custom tool development
Experience with security orchestration, automation, and response (SOAR) platforms
Active security certifications such as OSCP, CSSLP or related is strongly desired
Ability to work well under minimal supervision
Requires strong interpersonal, organizational, written and verbal communication skills

Job Responsibility

Design and execute complex penetration tests against cloud-native applications, infrastructure, and data stores
Exploit vulnerabilities in cloud platforms, such as AWS, Azure, and GCP, using advanced techniques and tools
Assess the security posture of cloud-native applications, microservices, and serverless architectures
Develop and execute attack scenarios that simulate real-world threats, including supply chain attacks, privilege escalation, and lateral movement
Lead and mentor a team of experienced penetration testers, providing guidance and support on advanced techniques and tools
Assign tasks, review deliverables, and ensure project timelines are met
Develop and maintain standard operating procedures for complex penetration testing activities

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Penetration Tester / Application Security Engineer

Realign

Location:
Mexico , Monterrey

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Requirements:

Additional Information:

Job Posted:
March 21, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Penetration Tester / Application Security Engineer

Application Penetration Tester

Principal Security Engineer

Senior Security Engineer

Product Security Engineer

Senior Penetration Tester

Product Security Engineer

Cloud Security Test Engineer

Cloud Automation Test Engineer

Penetration Tester / Application Security Engineer

Realign

Location:Mexico , Monterrey

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Requirements:

Additional Information:

Job Posted:March 21, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Penetration Tester / Application Security Engineer

Application Penetration Tester

Principal Security Engineer

Senior Security Engineer

Product Security Engineer

Senior Penetration Tester

Product Security Engineer

Cloud Security Test Engineer

Cloud Automation Test Engineer

Location:
Mexico , Monterrey

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
March 21, 2026