Penetration Tester

Overview

Penetration Testing Associate role responsible for the lifecycle of customer cybersecurity engagements, conducting authorized simulated attacks on client systems, networks, applications and digital assets, and translating findings into actionable proposals.

What you'll do

• Plan and conduct authorized simulated cyberattacks across client networks, computer systems, applications and digital infrastructure to identify vulnerabilities.
• Analyze complex customer architectures to uncover hidden security weaknesses and evaluate overall risk posture.
• Document testing methodologies, technical findings and prioritized remediation recommendations in clear, comprehensive reports for stakeholders.
• Craft and present tailored security solutions that align with Kyndryl's overarching security strategy to help clients strengthen their defenses.
• Partner with internal delivery and security teams to disseminate critical threat insights and recommended countermeasures.
• Stay abreast of emerging cyber threats, attack vectors and offensive security tools to continuously elevate Kyndryl's penetration testing practices.

What you'll need

• Proficiency in ethical hacking methodologies, tools and techniques, including hands-on experience conducting penetration tests and vulnerability assessments.
• Strong proficiency in relevant programming or scripting languages alongside industry-standard penetration testing toolsets.
• In-depth understanding of information security concepts, common vulnerabilities and modern attack vectors.
• Solid familiarity with established security frameworks and industry standards (e.g., NIST, ISO 27001).
• Proven ability to analyze complex technical systems, isolate root vulnerabilities and articulate practical remediation solutions.
• Strong communication and documentation skills capable of translating technical risk into clear stakeholder reports.

Nice to have

• Familiarity with major cloud computing platforms and their specific security architectures and considerations.
• Industry-recognized offensive or general security certifications, such as OSCP, CEH, LPT, GXPN or CISSP.
• Foundational understanding of Governance, Risk, and Compliance (GRC) concepts, regulatory standards or internal audit processes.
• Experience collaborating on multi-team security initiatives or customer-facing consulting engagements.

Details

• Location: Budapest, Hungary.
• Hybrid-friendly work environment.