**Role & seniority: ** Penetration Testing Engineer (Cybersecurity); 2–4 years hands-on/offensive security experience (mid-level)

**Stack/tools: **

Testing/attack: Burp Suite, Nmap, Nuclei, Metasploit, BloodHound, Frida
Frameworks/methods: OWASP WSTG, OWASP API Security Top 10, OWASP MASVS, MITRE ATT&CK
Scripting/automation: Python, Bash (or similar)
Top 3 responsibilities:
- Plan/execute manual penetration tests across web apps, APIs, mobile apps, Active Directory, and network/infrastructure
- Perform reconnaissance and attack surface mapping (passive/active recon, asset discovery, perimeter enumeration)
- Validate/exploit vulnerabilities safely, assess business impact, and produce actionable English reports
Must-have skills:
- Practical knowledge in at least two domains: web, API, mobile, AD, network/infrastructure testing
- Solid understanding of vulnerability classes, exploitation techniques, and root causes
- Ability to communicate in professional English (reports + client debriefs/remediation discussions)
- Comfortable with core pentest toolset listed above
- Scripting ability in Python/Bash for automation
Nice-to-haves:
- Experience building internal tools/automation and methodology improvements
- Familiarity with working style involving client pushback/rebuttals and technical debrief handling
- Staying current wi

Full Description

Publication date: Jul 02, 2026, 12:00AM

Contract duration

Orange Systems is the IT hub of Orange Moldova. An IT park resident, with over 900 employees, that delivers advanced IT solutions, enhancing a wide range of activities and full cycle development, impacting millions of customers across Europe.

Orange Systems is looking for a new colleague to fill in the position of Penetration Testing Engineer (Cybersecurity) to work with our International Partners.

what you will be doing

Plan and execute penetration tests across web applications, APIs, mobile apps, Active Directory, and network/infrastructure targets
Conduct manual testing aligned with recognized methodologies (OWASP WSTG, OWASP API Security Top 10, OWASP MASVS, MITRE ATT&CK)
Perform reconnaissance and attack surface mapping, including passive and active recon, asset discovery, and external perimeter enumeration
Identify, validate, and safely exploit vulnerabilities, then assess real-world business impact rather than just flagging raw findings
Write clear, actionable reports that translate technical findings into risk and remediation guidance clients can act on
Handle client communication professionally, including debriefs, remediation discussions, and responding to pushback or rebuttals on findings
Contribute to internal tooling, automation, and methodology development
Keep current with new attack techniques, tools, and disclosed vulnerabilities, and share that knowledge with the team

what we are looking for

2-4 years of hands-on penetration testing or offensive security experience

Strong practical knowledge in at least two of: web application security, API security, mobile security, Active Directory, and network/infrastructure testing Comfort with the core toolset (for example Burp Suite, Nmap, Nuclei, Metasploit, BloodHound, Frida) Solid understanding of common vulnerability classes, exploitation techniques, and their underlying causes Conversational level of English, ability to write professional, well-structured reports in English Scripting ability in Python, Bash, or similar for automating tasks and building small tools Good communication skills

what's in it for you

Unique learning experience in our company
Working experience with great potential for growth
Competitive salary

Benefits and compensations that you can discover on https: //www.orange.md/ro/cariera/beneficii We invite you to join Orange for a unique learning and working experience, with great potential for growth in an innovative environment. If you share the same views, apply today! Working for Orange is one of a kind experience. Come check it out! Orange Systems

https: //systems.orange.md/ 8, Calea Iesilor street, Chişinău, Moldova At Orange, only your skills matter. Regardless of your age, gender, background, origin, religion, sexual orientation, disability, neurodiversity, or appearance, we actively encourage diversity within our teams, as it is a collective strength and a driver of innovation.

Orange is a disability-inclusive employer: please feel free to let us know about any specific needs you may have.