Full Description

ICT Strypes is a company with extensive experience in software development. With a team of over 700 people, we take ownership of application roadmaps for our clients and structure their overall application landscape. Founded in 2008 as a small startup, ICT Strypes became part of the Dutch ICT Group in 2014. The ICT Group, with a history of delivering IT solutions since 1978, now has subsidiaries in the Netherlands, Bulgaria, Portugal, Germany, and Sweden. Our teams consist of talented hard-working professionals who love sharing their knowledge, experience, and joyous moments with their colleagues! You can join us at our offices in Sofia, Plovdiv, Burgas, and Varna, or choose to work remotely from anywhere in Bulgaria.

Position Description As a Penetration Tester, you will conduct security assessments on various applications and systems to identify vulnerabilities and recommend corrective measures. This role is ideal for professionals who enjoy real-world attack simulations, exploitation, and technical depth, and want to work in a collaborative environment where knowledge sharing and continuous growth are highly valued.

Responsibilities

• Perform technical penetration tests - including scoping, execution, and documentation;
• Identify, analyze, and exploit vulnerabilities across networks, systems, and web;
• Perform reconnaissance, information gathering, and attack path analysis;
• Communicate findings effectively to both technical and management stakeholders;
• Work with diverse environments (Operating Systems, Networks, Active Directory, authentication technologies);
• Prepare structured security reports (impact, likelihood, remediation);
• Map findings to OWASP, CWE, CVE, MITRE ATT&CK;
• Retest fixes and confirm remediation.

Requirements

• 4+ years of experience with pentesting or in a similar position;
• Good understanding of OWASP Top 10, MITRE ATT&CK framework, and modern attack surfaces;
• Experience with infrastructure, web, and/or mobile testing;
• Good knowledge of technology such as operating systems, network, Active Directory, authentication technologies;
• Understanding of TCP/IP, DNS, HTTP/S, TLS;
• Practical understanding of common attack vectors (Injection, XSS, SSRF, Access Control, Auth flaws, etc.);
• Experience with tools like Burp Suite, Nmap, Metasploit, SQLmap, ffuf;
• Familiarity with Linux & Windows environments;
• Scripting skills (Python, Bash, PowerShell);
• Strong knowledge of networks, OS, and web security;
• Experience in penetration testing or at least CTF activities, secure software development;
• Fluent English (written and spoken);