search Browse Jobs
Senior Cybersecurity Penetration Tester (f/m/div.)The Bosch Group · Aveiro, Portugal
The Bosch Group logo

The Bosch Group

company page ↗

Senior Cybersecurity Penetration Tester (f/m/div.)

🗓️ Posted 2026-10-09 Aveiro, Portugal Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 3,200 EUR–4,500 EUR/mo

About the Company

The Bosch Group is a leading global supplier of technology and services. It employs roughly 413,000 associates worldwide (as of December 31, 2025). The company generated sales of 91 billion euros in 2025. Its operations are divided into four business sectors: Mobility, Industrial Technology, Consumer Goods, and Energy and Building Technology. With its business activities, the company aims to use technology to help shape universal trends such as automation, electrification, digitalization, connectivity, and an orientation to sustainability. In this context, Bosch's broad diversification across regions and industries strengthens its innovativeness and robustness. Bosch uses its proven expertise in sensor technology, software, and services to offer customers cross-domain solutions from a single source. It also applies its expertise in connectivity and artificial intelligence in order to develop and manufacture user-friendly, sustainable products. With technology that is "Invented for life," Bosch wants to help improve quality of life and conserve natural resources. The Bosch Group comprises Robert Bosch GmbH and its roughly 500 subsidiary and regional companies in over 60 countries. Including sales and service partners, Bosch's global manufacturing, engineering, and sales network covers nearly every country in the world. Bosch's innovative strength is key to the company's further development. At 136 locations across the globe, Bosch employs some 82,000 associates in research and development. Instagram: https://www.instagram.com/boschglobal/ Facebook: https://www.facebook.com/BoschGlobal Glassdoor: https://bit.ly/3raTZnH Imprint: www.bosch.com/corporate-information Privacy statement: https://www.bosch.com/data-protection-notice-bosch-linkedin/ Computer Software Specialties: Mobility Solutions, Industrial Technology, Consumer Goods, Energy and Building Technology, Connected Industries, Internet of Things, Automated Driving, Smart Home, Software, Artificial Intelligence, Sustainable Technology

Responsibilities

  • ● Company Description
  • ● The Bosch Group has more than 400 000 employees around the world, present in 60 countries, and we are proud to impact people's lives and to work towards a more sustainable future.
  • ● In the city of Aveiro, Bosch has one of its biggest production sites for Bosch Home Comfort division, as well as a Research and Development Center for new and improved heating solutions for the residential segment. With more than 1400 employees, focused on innovation, sustainability and collaboration, Bosch Aveiro joins together experts in diverse areas, from mechanical engineering to connectivity and software solutions, as well as industrialization and quality.
  • ● At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people's lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other. Join in and feel the difference in mindsets, cultures, generations, identities and perspectives. Everyone should bring their authenticity and work together respectfully. Bosch is an employer that values diversity and equal opportunities. We welcome applications from people with disabilities and we can provide reasonable accommodations during the recruitment process and in the performance of professional activity. By including everyone and ensuring equal opportunities we unleash our full potential.
  • ● Job Description
  • ● As a Senior Penetration Tester, you will play a central role in identifying, assessing, and mitigating security vulnerabilities across our digital ecosystem. You will lead complex technical evaluations spanning modern web applications, backend architectures, APIs, and cloud-native environments, helping engineering teams build resilient, secure-by-design solutions.
  • ● Your contribution to something big:
  • ● Drive Offensive Security: Plan, scope, and execute comprehensive penetration tests on modern web applications, backend microservices, REST/GraphQL APIs, and cloud-native environments (AWS, Azure, or GCP).
  • ● Threat Modeling & Architecture Review: Collaborate closely with development and DevOps teams early in the design phase to conduct threat modeling and review architectures, ensuring security is baked in from day one.
  • ● Vulnerability Analysis & Exploitation: Perform deep-dive manual and automated vulnerability analyses, uncovering complex flaws like business logic bypasses, authorization failures, and server-side request forgeries.
  • ● Technical Reporting & Remediation Guidance: Author high-quality, actionable technical reports that translate complex technical risks into clear business impacts, providing pragmatic remediation guidance to our engineering squads.
  • ● Tooling & Innovation: Develop custom testing scripts and explore cutting-edge offensive workflows, including integrating AI-assisted security testing and LLM-augmented vulnerability analysis to maximize speed and coverage.
  • ● Qualifications
  • ● What distinguishes you:
  • ● Degree in Computer Science, Cybersecurity, IT, Software Engineering, or equivalent practical experience in offensive security.
  • ● Hands-on experience (ideally 3+ years) conducting technical security assessments, with a strong focus on web applications, APIs, and cloud infrastructure.
  • ● Offensive Security Expertise: In-depth knowledge of backend technologies, secure protocols, and security standards (e.g., OWASP Top 10, ASVS, WSTG, OAuth 2.0).
  • ● Cloud & Modern Tech: Solid familiarity with assessing cloud environments (AWS, Azure, or GCP), IAM configurations, container security (Docker, Kubernetes), and microservices.
  • ● Tools & Scripting: High proficiency with industry-standard offensive tools (e.g., Burp Suite Pro, OWASP ZAP, Postman) combined with scripting skills (e.g., Python, Bash) to automate testing workflows.
  • ● Excellent communication skills with fluency in English (written and spoken) to effectively present findings to both technical teams and business stakeholders.