Penetration Tester & Red Team Operator; Mid​/Senior

Build your future with QnR Group.
JOIN THE NEXT EUROPEAN TECHNOLOGY POWERHOUSE

Penetration Tester & Red Team Operator | Syste Com, member of QnR Group

Role overview

We are looking for a Penetration Tester & Red Team Operator to test the resilience of networks, applications, cloud environments and people through authorised security assessments and adversary simulation.

QnR Groupis a technology group with 35 years of experience, 8 companies, 4 delivery centers and 210+ professionals across Greece, Belgium, Cyprus and Poland. Listed on the Athens Stock Exchange since 2000, we deliver mission-critical digital transformation projects for the public and private sector. The Group’s capabilities covers software engineering, enterprise and generative AI, cybersecurity, cloud infrastructure, SAP and Service Now solutions, core banking and maritime intelligence.

Syste Com, a member of QnR Group, specializes in cybersecurity, digital resilience and IT infrastructure. The company delivers solutions and services that help organizations protect their systems and data, strengthen operational continuity and modernize their technology environments. Bringing together security and infrastructure expertise, Syste Com supports businesses across sectors in building secure, reliable and resilient digital operations.

What you'll work on:

• Conduct scoped vulnerability assessments and penetration tests
• Perform manual validation and exploitation, not only automated scanning
• Document findings, business impact, evidence and practical remediation
• At senior levels, design red-team scenarios and lead client-facing engagements
• Work with defensive teams to improve prevention and detection

What you bring:

• Hands-on authorised testing experience across one or more of web applications, APIs, infrastructure, Active Directory, wireless, mobile or cloud environments
• Strong understanding of OWASP guidance, common attack paths, vulnerability classes and safe rules of engagement
• Ability to combine automated tooling with manual validation, exploitation and business-impact analysis
• Proficiency with common testing toolsets and scripting in Python, Power Shell, Bash or a comparable language
• Ability to produce clear, reproducible findings with evidence, severity rationale and practical remediation advice
• Understanding of operational security, data handling, legal boundaries and controlled test execution
• For red-team candidates, experience planning adversary scenarios, command-and-control operations, lateral movement and detection-evasion testing
• For senior candidates, experience scoping engagements, leading delivery and presenting findings to technical and executive stakeholders.

Required certifications:

Mid-level and Senior: at least one recognised practical certification, such as OSCP, OSWA, OSWE, GPEN, GWAPT, CRTO or equivalent

Senior red-team roles may require an advanced certification such as OSEP, OSED, OSCE3, GXPN or equivalent

Nice to have:

• OSCP, OSWA/OSWE, GPEN, GWAPT, CRTO or equivalent practical capability
• Purple-team, exploit-development or social-engineering experience where authorised