Senior AppSec Penetration Tester
Go beyond automated scanning. Find complex vulnerabilities, build exploitation chains and demonstrate their real-world impact.
As one of the leading cybersecurity teams in Denmark, we are a highly skilled and passionate team dedicated to helping our customers protect their digital realms, by hacking their systems proving real exploitation and impact. Our team consists of experts who live and breathe for hacking, and the crew show great pride in keeping themselves cutting edge and up to date with emerging threats.
The Offensive AppSec team is growing and is looking for an experienced penetration tester with a deep understanding of web applications. The Offensive AppSec team is responsible for helping identify and exploit vulnerabilities across areas such as web, mobile, AI, kiosk and desktop.
In the Offensive AppSec team at itm8, we understand that testing applications requires more than going through a checklist or running automated scans. Context matters. We pride ourselves in understanding that AppSec is multidimensional and proving impact by showing exploitation chains and attack narratives of multiple vulnerabilities.
Your role
We are looking for an experienced penetration tester to join us as a Security Advisor, with strong practical skills in web application security and an interest in expanding into areas such as mobile, AI, or mainframe security.
You will own engagements from scoping through testing, reporting, and customer debriefing. You should be comfortable working independently, adapting to different customer environments, and explaining technical findings to both developers and business stakeholders.
You will also contribute to the team's technical development by sharing knowledge, reviewing findings, and supporting less experienced colleagues.
Key responsibilities
Identify complex vulnerabilities, develop exploitation chains, and demonstrate their impact.
Lead penetration testing engagements from scoping through testing, reporting, and customer debriefing.
Communicate technical risks and their business implications to management and executive stakeholders.
Assess and prioritise vulnerabilities based on business context and risk.
Share knowledge about emerging threats and support the development of less experienced colleagues.
We are looking for a teamm8 who
Has at least 3 years of AppSec cybersecurity consulting or working with software security.
Has a proven track record in penetration testing, bug bounty or similar activities.
Has a strong understanding of web vulnerabilities and exploitation across technologies.
Has experience documenting security findings and communicating practical remediation advice.
Is able to perform onsite assignments in the Zealand and Copenhagen area.
Has a clean criminal record.
Has full working proficiency in English.
Nice to have
Ideally you bring one or more of the following:
Relevant certifications such as: OSWE, eWPTX, CWEE, OSWA, eWPT, OSCP, CPTS or similar.
Security research, whether formally published or conducted independently.
Experience with static analysis and source code review.
Experience with AI-enhanced penetration testing.
Public CVEs or CTF placings.
What you get
Competitive salary.
Opportunities and budget for growth and learning.
Access to a large group of colleges that only focus on cyber security.
The opportunity to be part of a highly skilled and passionate cybersecurity team that takes pride in staying cutting edge and up to date with emerging threats.
Ready to join the team?
We look forward to receiving your CV.
If you have questions about the position, you're always welcome to contact Christoffer Bech on email (chbec@itm8.com) – we're here to help.
We conduct interviews on an ongoing basis and will close the recruitment process as soon as we've found the right match. Please note that a criminal record check will be obtained prior to employment.
About itm8
We are itm8 – our customers’ IT-mate.
1,600+ teammates across Denmark, Sweden, the Philippines, and the Czech Republic. With specialists in everything from IT security and ERP to AI and software development.
But what brings us together isn’t just technology. It’s PURPLE POWER – our way of working. Here, we help each other first, celebrate what works, and cut through the bullshit. We believe in ambition over the status quo. And that our differences make us stronger.
With us, it’s not about being perfect. It’s about taking responsibility, creating value, and growing – every day.
Sound like you? Then apply – and become our next team’m8’.
- Afdeling
- Cyber Security
- Lokation
- København
- Jobtype
- Fuldtid