At HiQ, every challenge is an invitation to explore new possibilities. We’re looking for someone who thrives on the thrill of discovery, who sees every system as a puzzle waiting to be solved, and who finds energy in the pursuit of safer, smarter digital solutions.

As part of our Pentest team, you’ll be at the heart of our mission to build secure applications and environments for some of the most exciting organizations in the Nordics. Your days will be filled with hands-on penetration testing, creative problem-solving, and the freedom to dive deep into the latest tools and techniques. Whether you’re orchestrating a Red Team engagement or probing the intricacies of cloud security, you’ll have the autonomy to shape your own approach, while always knowing that a team of passionate experts has your back.

As AI becomes part of our clients’ applications, the attack surface evolves too. You’ll have the opportunity to explore the security of LLM-powered features and AI agents, testing how they handle malicious instructions, sensitive data, and access to connected tools and systems.

You’ll work with Burp Suite, Nmap, Wireshark, and a host of other tools, sometimes in the cloud, sometimes on-prem, always with a curiosity for what comes next. Your experience with Active Directory and scripting will come to life as you navigate complex environments, uncover vulnerabilities, and help our clients see their systems through a new lens. If you’ve cracked hashes, explored mobile app security, or sharpened your skills in CTFs, you’ll find plenty of opportunities to push your expertise even further.

What You Bring

• At least 5 years of practical experience in penetration testing or Red Team operations

• Deep familiarity with industry-standard tools such as Burp Suite, Nmap, and Wireshark

• Strong background in assessing and securing web applications

• Proven experience performing Active Directory and broader network security assessments

• Understanding of modern cloud platforms and architectures

• Scripting skills that enable you to automate workflows and develop new solutions

• Curiosity about AI-assisted tools for research, scripting, and analysis, combined with critical thinking and careful validation of results

• Relevant education and/or certifications (e.g., OSCP, OSCE, AWS/Azure Security)

• Excellent communication skills, with the ability to clearly document and articulate vulnerabilities and recommendations

• EU citizenship

Bonus Skills

• Experience with hash cracking

• Knowledge of mobile application security

• Knowledge of cloud security

• Networking know-how

• Capture the Flag participation

• Insights into computer forensics

Curiosity, Backed by a Team

Here, learning is woven into the fabric of every project. Whether you’re pursuing new certifications, experimenting with the latest exploits, or sharing insights with colleagues, you’ll find endless room to grow. We celebrate curiosity and initiative. If you spot an opportunity to make something better, you’ll have the freedom and support to make it happen.

You’ll be trusted to run penetration tests independently, but you’ll never be alone. Collaboration is second nature here: ideas bounce, knowledge flows, and everyone’s voice matters. You’ll document your findings with clarity, communicate risks with empathy, and help guide clients toward stronger, more resilient solutions.

If you’re ready to join a team where your passion for security is matched only by your drive to learn and create, we’d love to meet you.

Ready to take the next step? Apply now and help us challenge assumptions, uncover vulnerabilities, and build a more secure digital future.