Cybersecurity Consultant

Infinum

. Conduct penetration testing on web and mobile applications to identify security vulnerabilities .

Posted 11/12/2026full-timeZagreb • CroatiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in penetration testing for web and mobile applications, with a strong understanding of OWASP standards and offensive security practices. Proficient in developing test scripts, conducting risk assessments, and collaborating with diverse teams to enhance security measures.

Highest-signal resume keywords

Web Penetration TestingMobile Penetration TestingCloud Security TestingOWASP StandardsOffensive Security Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingRisk AssessmentTest Script DevelopmentVulnerability IdentificationSecurity Best PracticesApplication SecurityNetwork ProtocolsTask AutomationCompliance StandardsCybersecurity Techniques

Soft Skills

Strong Communication SkillsInterpersonal SkillsOwnershipCollaboration

Tools & Technologies

Burp SuiteMetasploitNmapCloud Security ToolsIoT Security Tools

Certifications & Qualifications

PenTest+EWPTEMAPTOSCPOSWEGWAPT

Industry Keywords

OWASPISO 27001SOC2PCI-DSSCybersecurity

Tech Stack

Tools & technologies

CloudCyber SecurityIoTPython

About the role

Key responsibilities & impact

Conduct penetration testing on web and mobile applications to identify security vulnerabilities
Conduct infrastructure and cloud security testing to identify potential weaknesses and misconfigurations
Provide detailed reports with risk assessments and remediation recommendations
Collaborate with clients’ teams to help them understand and fix vulnerabilities
Develop and maintain test scripts and custom exploits for penetration tests
Stay up to date with attack techniques and tools to improve testing processes and methodologies
Contribute to improving security processes and train team members on security best practices
Work with engineers and system architects to integrate security into the software development lifecycle
Test web and mobile applications, infrastructure, networks, and IoT ecosystems for global clients

Requirements

What you’ll need

At least 3 years of experience in web & mobile penetration testing, cloud testing, and application security
Deep understanding of OWASP standards and guidelines, including WSTG, ASVS, MASTG, MASVS, and SAMM
Strong communication and interpersonal skills for collaborating with technical and non-technical stakeholders
Experience writing clear, concise, and understandable penetration testing reports
Keen eye for identifying hidden weaknesses
Strong understanding of the offensive security landscape
Affinity for keeping up with cybersecurity best practices and news
Comfortable taking ownership of project aspects and ensuring timely delivery
Excellent knowledge of written and spoken English
At least one recognized offensive security certification, such as PenTest+, eWPT, eMAPT, OSCP, OSWE, GWAPT, or similar
Willingness to travel occasionally for client meetings, workshops, and on-site engagements
Bonus: Hands-on experience with penetration testing tools and frameworks such as Burp Suite, Metasploit, and Nmap
Bonus: Familiarity with application security principles and network protocols
Bonus: Familiarity with cloud security and related attack vectors
Bonus: Programming or scripting experience, such as Python or Bash, for task automation
Bonus: Familiarity with compliance standards such as ISO 27001, SOC2, and PCI-DSS

Benefits

Comp & perks

Benefits information available via the employer's benefits page