Penetration Tester

Company Description The Cyber Police Department of the National Police of Ukraine is a specialized law enforcement unit focused on combating cybercrime and protecting critical information infrastructure across the country. The department works closely with national and international partners to prevent, detect, and investigate cyber incidents affecting government, businesses, and individuals. Team members apply advanced technical expertise to support digital forensics, incident response, and proactive security measures. The department offers opportunities to contribute to national security, work with cutting-edge cybersecurity technologies, and participate in high-impact investigations.

Role Description This full-time Penetration Tester role is a hybrid position based in Kyiv, with the possibility to perform part of the work from home. The role involves planning, executing, and documenting security assessments of applications, networks, and systems to identify vulnerabilities and recommend mitigation strategies. Day-to-day tasks include conducting penetration tests, participating in red team exercises, and collaborating with incident response and digital forensics teams on complex cases. The Penetration Tester will analyze security controls, support secure development practices, and contribute to the continuous improvement of cybersecurity standards within the department. The role requires close cooperation with other technical units and clear communication of findings to both technical and non-technical stakeholders.

Qualifications

• Strong cybersecurity foundation, including knowledge of common attack vectors, network security, and secure system architecture.
• Hands-on penetration testing and red teaming skills, with experience in planning and executing offensive security assessments.
• Reverse engineering and malware analysis capabilities to examine binaries, deconstruct malicious code, and understand exploit techniques.
• Application security skills, including secure coding principles, vulnerability identification (e.g., OWASP Top 10), and remediation guidance.
• Proficiency with penetration testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux or similar).
• Ability to produce clear technical documentation and reports, and present findings to diverse audiences in a structured manner.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• Relevant industry certifications such as OSCP, OSCE, CEH, GPEN, or similar are highly beneficial.
• Strong analytical thinking, attention to detail, and ability to work both independently and collaboratively in a high-responsibility environment.
• Working proficiency in Ukrainian and ability to read technical materials in English.