Skip to content
Test management and QAStrategy, planning and control through to sign-off.Test automationRegression tests that run with every build.Load and performance testingPeak load, month-end, campaigns.Security and penetration testingScans in the pipeline, pen tests to OWASP.AI in testingFaster testing, sign-off stays with people.IT experts on demandISTQB-certified, quickly on board.
All services follow the ISTQB standard.All services
Banks and financial servicesCore banking, payments, DORA.InsurancePolicies, claims, rating engines.Rail and logisticsSystems that run around the clock.More industriesTelecoms, automotive, public sector, industry.
Server units with status lights in a rack

Security and Penetration Tester (m/f/d)

Job ID CB-SP-20265

You check applications specifically for security gaps and make security testing a fixed part of every release.

Apply now

Your tasks

  • Agree scope, time windows and rules of a test with the client
  • Carry out penetration tests for web applications, APIs and mobile apps
  • Integrate automated security checks into CI/CD pipelines
  • Rate vulnerabilities by risk, prove them and document them clearly
  • Retest fixes and advise development teams
  • Summarise results for management, audit and supervisors

Your profile

  • Several years of experience with penetration testing or application security
  • Confident with OWASP Top 10, OWASP ASVS and OWASP API Security Top 10
  • Experience with tools such as Burp Suite, OWASP ZAP, Nessus or Nmap
  • Responsible, confidential handling of client systems and data
  • Good German and good English

Nice to have

  • Certifications such as OSCP, OSWE, CEH or similar
  • Experience with static analysis and dependency scanning, for example SonarQube, Semgrep or Snyk
  • Knowledge of DORA, PCI DSS or ISO 27001

What we offer

Training
ISTQB certifications and professional development, with time and budget for it
Location
Frankfurt am Main, client projects across the DACH region, on site or remote

How applying works

  1. Application

    Your CV and a few sentences about yourself to karriere@cubio-consulting.com.

  2. Getting to know each other

    We get back to you and meet for a conversation.

  3. Technical conversation

    A conversation about a real testing problem, not an exam.

  4. Offer

    You receive a written offer.

We only use your application data for the application process. More in our privacy policy.

Interested?

Send us your CV and a few sentences about yourself. Please quote the job ID; it is already in the subject when you click “Apply now”.

Apply nowkarriere@cubio-consulting.com