<?xml version="1.0" encoding="UTF-8"?>
<source>
  <jobs>
    <job>
      <externalid>65b94380-b2c</externalid>
      <Title>Penetration Tester</Title>
      <Description><![CDATA[<p>As a Penetration Tester, you will conduct penetration testing of web applications, APIs, and microservices architectures aligned with standards such as from OWASP. You will perform advanced security assessments of cloud environments (AWS, Azure, GCP), hybrid, and on-prem infrastructure. You will also perform security validation of Infrastructure as Code (IaC) implementations, identifying misconfigurations and compliance gaps.</p>
<p>You will conduct mobile application security assessments for Android and iOS platforms. You will author detailed technical reports documenting vulnerabilities, risk analysis, and remediation recommendations. You will present findings to stakeholders and technical teams. You will mentor colleagues and contribute to team skill development. You will handle the development of testing methodologies and processes through automation and innovation.</p>
<p><strong>Key Responsibilities:</strong></p>
<ul>
<li>Conduct penetration testing of web applications, APIs, and microservices architectures</li>
<li>Perform advanced security assessments of cloud environments, hybrid, and on-prem infrastructure</li>
<li>Validate Infrastructure as Code (IaC) implementations</li>
<li>Conduct mobile application security assessments for Android and iOS platforms</li>
<li>Author detailed technical reports</li>
<li>Present findings to stakeholders and technical teams</li>
<li>Mentor colleagues and contribute to team skill development</li>
<li>Develop testing methodologies and processes through automation and innovation</li>
</ul>
<p><strong>Requirements:</strong></p>
<ul>
<li>Proven track record in web application security testing with Burp Suite proficiency</li>
<li>Good understanding of IT architectures and security concepts</li>
<li>Security assessment and testing certifications (e.g., OSCP, OSWE, WAPTX) or cloud security certs</li>
<li>Experience with Infrastructure as Code (Terraform, Ansible)</li>
<li>Experience writing clear, actionable reports</li>
<li>Demonstrated experience in cloud security for at least one major platform (AWS/Azure/GCP)</li>
</ul>
<p><strong>Benefits:</strong></p>
<ul>
<li>Support and appreciation for colleagues as they are and celebrate successes together</li>
<li>Welcome creativity and new impulses</li>
<li>Opportunity to grow in tasks, knowledge, and responsibility</li>
<li>Comprehensive overview of benefits available</li>
</ul>
<p><strong>Work Arrangements:</strong></p>
<ul>
<li>Start date by arrangement, always on the 1st and 15th of the month</li>
<li>Full-time (40h) working hours</li>
<li>27 vacation days</li>
<li>Unlimited employment contract</li>
<li>Flexibility and willingness to travel</li>
<li>Valid work permit required</li>
</ul>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>onsite</Workarrangement>
      <Salaryrange></Salaryrange>
      <Skills>Burp Suite, OWASP, Cloud security, Infrastructure as Code, Mobile application security</Skills>
      <Category>IT</Category>
      <Industry>Consulting</Industry>
      <Employername>MHP</Employername>
      <Employerlogo>https://logos.yubhub.co/mhp.com.png</Employerlogo>
      <Employerdescription>MHP is a technology and business partner that digitizes its customers&apos; processes and products, supporting them in their IT transformations along the entire value chain. It serves over 300 customers worldwide.</Employerdescription>
      <Employerwebsite>http://www.mhp.com/</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://jobs.porsche.com/index.php?ac=jobad&amp;id=17643</Applyto>
      <Location></Location>
      <Country></Country>
      <Postedate>2026-04-22</Postedate>
    </job>
  </jobs>
</source>