Vacant job

Are you a penetration tester with several years of experience ready for new challenges alongside like-minded professionals? Combitech is now looking for experienced penetration testers to join our team, based in Gothenburg, Lund, Kristianstad, Växjö, or Karlskrona. Other locations may also be considered if you demonstrate high independence and willingness to travel. As a penetration tester at Combitech, you will be part of a unit consisting of specialists in Penetration Testing and Red Teaming.

Your role as a Penetration Tester

The penetration testing unit at Combitech is a technically strong and socially cohesive team, geographically distributed across several locations in Sweden. We work broadly, covering everything from IoT and web security to networks, Active Directory, Automotive, and OT/ICS, taking on complex assignments for government agencies, the defense industry, industrial sectors, and finance.

The responsibilities in this role involve executing assignments for our clients. The core of our working method is always collaboration, where we work with team deliveries that complement each other's competencies to ensure higher quality, better problem-solving, and continuous learning. To facilitate this, we hold regular meetings where we share experiences, methodologies, and updates, as well as create space for technical discussion and planning, ensuring everyone feels involved and can contribute their knowledge.

We invest in your development and offer support for certifications, time for learning, and the opportunity to represent us at conferences and in professional networks. This is a place where you contribute and grow, both professionally and personally.

Each assignment concludes with a report and usually an accompanying presentation, in both Swedish and English. You will communicate with both technically knowledgeable individuals and those without a technical background.

Business travel is frequent as many of our assignments require us to be on-site at our clients' locations due to security clearance requirements, as well as to perform tests that require physical proximity to the test object.

Who are you?

We are looking for senior penetration testers with at least five years of professional experience. You are proficient and confident in approaches, methodologies, and techniques within penetration testing, including planning, scoping, and test design, and you have encountered many types of IT environments in your career. You have knowledge of relevant standards, frameworks, and methods (e.g., OWASP, TIBER, etc.), a strong technical foundation in networking and infrastructure, good operating system knowledge (Linux and Windows), and experience with virtualization and containers.

As a senior, we also believe you are accustomed to helping plan, define assignments, and contribute to test plans for various projects. In other words: you can take project/delivery responsibility, lead test teams, deliver schedules, estimations, and sign-offs. A technical degree is desirable, but your experience and personal qualities weigh heavier than a specific degree.

To thrive in this role, you are flexible and have the ability to travel, build customer contact, and work on-site when needed, which is crucial for maintaining good relationships and successful projects. You collaborate easily with others and contribute to a positive atmosphere within the unit. We are a technical team that supports each other and helps out where needed; we believe you share our joy in spreading competence to colleagues and helping each other move forward. You are structured in your work and have a strong ability to express yourself in Swedish and English, both verbally and in writing.

We understand that you may not have experience in all these areas, but we value your expertise in several of them. Desirable qualifications include certifications such as OSCP, SANS/GCIA/GPEN, CREST, or ISC2, as these are often requested by our clients. Experience with Red Teaming, scenario-based testing, and threat actor emulation is also valuable. Other potentially relevant areas include deep knowledge of Active Directory and Windows internals, practical experience with cloud security in AWS, Azure, or GCP (including IAM and cloud attacks), and cloud-related certifications. Skills in web security and advanced tools like Burp Suite, experience with AI and LLMs, OT security and industrial systems, wireless communication, and IoT security are of interest. We also view positively knowledge in hardware and embedded systems, programming and scripting, exploit development, reverse engineering, malware analysis, secure code review and OWASP ASVS, as well as experience with storage solutions and advanced network architectures.

Since the position involves work covered by defense secrecy, you are required to undergo and pass a security clearance investigation with register check.

Selection will take place after the application deadline due to holidays. We look forward to your application!

Join us and make a difference

For us, our employees are the key to building a smart and resilient society. We know that the impact of today's technology can only reach its full potential when the right people are in the right places using it. We believe in the power of collective intelligence and experience – something that arises when individuals with different competencies and perspectives meet. Therefore, we prioritize diversity and inclusion, as we know it is crucial for increasing creativity, innovation, engagement, and well-being.

Want to know more about what it's like to work with us? Check out our career pages!

Contact person: Jonas Wennerberg, Hiring Manager, jonas.wennerberg (@) combitech.com

We kindly decline recruitment agency collaborations.