Pentester & Security Engineer

Skopje, North Macedonia
Bitola, North Macedonia
Ohrid, North Macedonia

G+D Netcetera operates in a fast-paced B2B environment and is specialized in secure financial sector applications. The company is growing and active in the Research & Development of new Products and Services for customers.

G+D Netcetera is an early adopter and a specialist in digital payment systems and the corresponding security and compliance needs.

We’re looking for a versatile Pentester & Security Engineer who can shift seamlessly between deep technical testing and hands-on enablement of engineering teams. You’ll perform penetration tests, drive threat modeling and security requirements engineering, and take ownership of developing, maintaining, and operating cloud‑security tools, guardrails, and configurations. You will help teams remediate vulnerabilities at speed. This role is perfect for a pragmatic engineer who can read and write code, understands how products are built and shipped, and loves to partner with developers to make secure delivery the default.

The job ad is valid until 31.03.2026

Your Tasks

  • Perform targeted penetration tests and security assessments across:
    • K8s and containerized workloads
    • Web applications and APIs
    • AWS and Cloud Infrastructure
  • Support development teams in Secure software engineering
    • Security Architecture support
    • Security Requirements support
    • Threat modelling 
    • Secure code reviews
    • Security Tooling usage (CI/CD, SAST, DAST etc)
  • Vulnerability Management
    • Support teams in their vulnerability management lifecycle ( discovery → triage → remediation → validation) 
    • Champion secure coding practices and provide targeted remediation guidance with code snippets.
  • Security Operations
    • Build or enhance security telemetry using AWS-native tooling (CloudTrail, GuardDuty, WAF, Security Hub, CloudWatch)
    • Implement and maintain policy-as-code tools & solutions (Kyverno, OPA)
    • Implement and maintain a variety of security tools such as (Neuvector, Trivy, Dependencytrack, Defectdojo)

Your profile

  • Bachelor’s degree in computer science, information security, engineering, or a related field.
  • A minimum of 3+ years of solid, hands‑on experience in Software engineering, IT security engineering, systems engineering, or cloud security within a corporate or high‑tech environment.
  • 2+ years penetration testing or application security experience.
  • Proven ability to read, write, and understand production code.
  • Container & Kubernetes security experience (RBAC, admission controls etc).
  • Understanding of cloud-native attack vectors (privilege escalation, SSRF, misconfigured IAM policies).
  • Familiarity with traditional, modern, and software‑defined networking concepts and technologies.
  • Fluent English speaker and writer.

Nice to haves:

  • Experience in fintech, payments, banking, or regulated industries.
  • Knowledge of relevant standards (PCI DSS, SOC 2, ISO 27001, EBA/FINMA guidelines).
  • Familiarity with compliance expectations in regulated environments.
  • Strong knowledge of AWS security fundamentals, including IAM, KMS, network segmentation, workload identity, and monitoring.
  • Professional experience with Terraform.
  • Certifications such as OSCP, OSWE, AWS Security Specialty

About G+D Netcetera

G+D Netcetera is a pioneering Swiss software company with forward-thinking digital solutions across the banking, payment, mobility, healthcare, and publishing industries. By pushing the boundaries of digital possibilities, G+D Netcetera creates growth opportunities for businesses. With its expertise and over 25-year track record, the company develops future-proof and scalable software that creates value for its clients and consumers. G+D Netcetera is an expert at delivering seamless user journeys within highly secure and privacy-driven environments.

Founded in 1996, G+D Netcetera is a business of about 850 experts at its headquarters in Zurich, Switzerland, and its locations across Europe. Since 2020, the company has been the digital powerhouse within the security tech group Giesecke+Devrient (G+D) as a Trusted Software division. G+D is a global company headquartered in Munich, Germany, shaping trust in the digital age with integrated security technology.

More information on netcetera.com and LinkedIn.

Share page: