Gammaorg Zrt. · Budapest · Szeged

Ethical hacking.

KnowledgeSecurityEducationQuality

Gamma rays get through where other radiation stops. So do we. We test your defences layer by layer and show you where the gaps are – before a real attacker finds them.

Move the mouse – your cursor is the radiation source. Click for a beam.

in business since
2019
offices: Budapest and Szeged
2
specialists
14
kinds of international certification
9

Bubble chamber simulation: photons turn into electron–positron pairs inside the logo, and the magnetic field curls them into spirals.

01 — Method

Where the gaps line up.

A sheet of paper stops an alpha particle; a few millimetres of aluminium stop beta radiation. Gamma rays pass through both – and even thick shielding only weakens them gradually, never to zero.

Cyber defence works the same way: no single layer is perfect. Firewalls, mail filters, endpoint protection and permissions all have gaps. Trouble starts when those gaps line up – James Reason’s Swiss cheese model. We find out where.

Penetrating power

α Alpha

β Beta

γ Gamma

stopped by paper

stopped by aluminium

weakened, but gets through

paperaluminiumlead
  1. 01 / 05

    Defence in depth

    Six layers stand between an attacker and your most valuable data. Every one has gaps; the question is when they line up. The simulation is running now: the gaps drift, the way bugs, updates and settings come and go in real life.

    Move your cursor to steer the source – find the gap.

  2. 02 / 05

    Scoping and reconnaissance

    We agree the goals and the rules of engagement – black-, grey- or white-box – then map the attack surface: what is visible from outside, what is reachable from inside, and who can access what.

  3. 03 / 05

    Controlled testing

    Layer by layer, with permission and full documentation, we test your defences: applications, network, devices and the user environment – within your internal policies.

  4. 04 / 05

    Where the gaps connect

    Single flaws are rarely fatal. We show which weaknesses chain together into a real path to your critical data. In a real attack, this is where the trouble would begin – with us, this is where the report begins.

  5. 05 / 05

    Report, remediation, retest

    You get an expert opinion with the full details of the assessment, not just a list. After you fix the issues, we test again – until the gaps are closed.

    • The assessment methods we chose
    • Gaps and vulnerabilities found
    • Recommended countermeasures
    • Recommended new defences
    • Retesting of the fixes

02 — Services

Four disciplines. One goal.

So that the gaps turn up in our report – not in an incident.

01

Ethical hacking

Our ethical hackers map and analyse your network, hardware and software and their configuration, your inbound and outbound traffic and how well your defences work – and the user environment too, from a phishing and social engineering point of view.

  • Assessing and mapping systems and networks
  • Analysing the user environment
  • Surveying devices and resources
  • Analysing inbound and outbound traffic
  • Effectiveness of existing defences
  • Social engineering
02

Training and consulting

Information security covers everything worth protecting: applications, devices, infrastructure, people and the information itself. We run training tailored to every level of the organisation, and give concrete advice on building a secure network and tuning the security settings of the systems you already have.

  • Security-aware behaviour across the organisation
  • Reducing IT risk
  • A higher level of information security
  • Security-aware network design and topology
  • Tuning the security settings of your systems
03

Development

We build custom software around your business and its needs. Every step starts with careful planning – requirements, feasibility, development, testing including live testing – and you get a working system, documentation and training at the end.

  • Requirements analysis
  • System design and user tuning
  • Development for your environment
  • Live testing
  • Documentation and training

A courier support system, decision support for grain trading, our own test platform – and now AI-assisted analysis of large email systems.

04

IT audit readiness

ISO 27001 · NIS2

A general IT audit reveals the risks your company faces: protection against physical and digital intrusion and the weaknesses of your security systems, with a full information security risk analysis following COBIT and Hungarian supervisory recommendations. We verify that the controls you have introduced actually work.

  • IT audit
  • Data protection audit
  • Application audit
  • Vulnerability audit
  • Compliance audit
  • Code review

The periodic table of security testing

Fifteen kinds of assessment in four groups. Pick an element for the details.

  • Applications
  • Infrastructure
  • People & organisation
  • Malware
  1. 1 Wa Web application testing OWASP Top 10
  2. 2 Ap API security testing OWASP API Security Top 10
  3. 3 Mo Mobile app testing OWASP MASVS
  4. 4 Tc Thick client testing OWASP Desktop App Security Top 10
  5. 5 Sc Source code review SAST + manual review
  6. 6 In Infrastructure testing NIST SP 800-115
  7. 7 Nw Network security assessment PTES
  8. 8 Sg Network segregation testing PCI DSS 11.4.5
  9. 9 Wf Wi-Fi assessment WPA2 / WPA3 · 802.1X
  10. 10 Io IoT security testing OWASP IoT Top 10
  11. 11 Ws Workstation assessment CIS Benchmarks
  12. 12 Ph Phishing & social engineering Awareness testing
  13. 13 Rt Red teaming TIBER-EU · DORA TLPT
  14. 14 Cs Security consulting ISO 27001 · NIS2
  15. 15 Ma Malware analysis Static + dynamic analysis
1Wa

Applications

Web application testing

A thorough security assessment of your web applications, from authentication to business logic.

What we check
  • Authentication and session handling
  • Access control
  • Input handling
  • Configuration and encryption

Reference: OWASP Top 10

Request a quote for this
2Ap

Applications

API security testing

Checking the interfaces between systems: who can reach what, and which data comes back.

What we check
  • Object-level authorisation
  • Authentication and tokens
  • Excessive data exposure
  • Rate limiting

Reference: OWASP API Security Top 10

Request a quote for this
3Mo

Applications

Mobile app testing

iOS and Android apps, from the data stored on the device to the back-end systems.

What we check
  • On-device data storage
  • Transport security and certificates
  • Authentication
  • Back-end APIs

Reference: OWASP MASVS

Request a quote for this
4Tc

Applications

Thick client testing

Desktop applications and the way they talk to their servers.

What we check
  • Client–server communication
  • Locally stored data and secrets
  • Update process
  • Permissions

Reference: OWASP Desktop App Security Top 10

Request a quote for this
5Sc

Applications

Source code review

Automated tools plus experienced eyes: we look for flaws where they are made.

What we check
  • Insecure coding patterns
  • Known vulnerabilities in dependencies
  • Secrets in code
  • Fix guidance for developers

Reference: SAST + manual review

Request a quote for this
6In

Infrastructure

Infrastructure testing

Servers, services and cloud environments, tested from outside and inside.

What we check
  • Exposed services
  • Patch level
  • Misconfigurations
  • Cloud settings

Reference: NIST SP 800-115

Request a quote for this
7Nw

Infrastructure

Network security assessment

Checking network devices, rules and boundaries: what gets in, and what gets out.

What we check
  • Firewall and router rules
  • Remote access (VPN)
  • Network device configuration
  • Traffic analysis

Reference: PTES

Request a quote for this
8Sg

Infrastructure

Network segregation testing

We verify that your network segments really keep systems apart.

What we check
  • Reachability between zones
  • Isolation of critical systems
  • The IT/OT boundary
  • Rule effectiveness

Reference: PCI DSS 11.4.5

Request a quote for this
9Wf

Infrastructure

Wi-Fi assessment

The security of wireless networks, access points and guest networks.

What we check
  • Encryption and authentication
  • Guest/internal separation
  • Rogue access points
  • Coverage outside the building

Reference: WPA2 / WPA3 · 802.1X

Request a quote for this
10Io

Infrastructure

IoT security testing

Smart devices, cameras, sensors and industrial endpoints – together with their cloud services.

What we check
  • Default credentials
  • Firmware and updates
  • Communication
  • Physical interfaces

Reference: OWASP IoT Top 10

Request a quote for this
11Ws

Infrastructure

Workstation assessment

Checking the configuration and protection of a typical employee laptop.

What we check
  • System hardening
  • Endpoint protection in practice
  • Local privileges
  • Disk encryption

Reference: CIS Benchmarks

Request a quote for this
12Ph

People & organisation

Phishing & social engineering

Pre-agreed, realistic phishing campaigns and on-site tests, followed by targeted training.

What we check
  • Email campaign
  • Phone outreach
  • Physical entry
  • Debrief and training

Reference: Awareness testing

Request a quote for this
13Rt

People & organisation

Red teaming

A longer, targeted simulation that tests technology, people and processes at once – and whether your organisation notices.

What we check
  • Threat-led scenario
  • Measuring detection and response
  • Testing across layers
  • Joint review (purple teaming)

Reference: TIBER-EU · DORA TLPT

Request a quote for this
14Cs

People & organisation

Security consulting

Strategy, policies, risk management and compliance – with practical recommendations.

What we check
  • Risk analysis
  • Policies and procedures
  • NIS2 compliance
  • Security roadmap

Reference: ISO 27001 · NIS2

Request a quote for this
15Ma

Malware

Malware analysis

Analysing suspicious files in an isolated environment: what they do, where they came from, and what they touched.

What we check
  • Behaviour analysis in a sandbox
  • Indicators of compromise
  • Identifying affected systems
  • Defensive recommendations

Reference: Static + dynamic analysis

Request a quote for this

03 — About us

Small team. High penetrating power.

Gammaorg Zrt. was founded in 2019, with offices in Budapest and Szeged. Our people are experienced specialists in software development, consulting and the methods of ethical hacking – and that know-how is the foundation of our main focus: IT security.

We help companies assess the vulnerabilities of their IT systems, uncover the goal and source of specific attacks, and check and maintain their systems regularly. We work flexibly and discreetly, tailored to our clients’ needs, on long-term and one-off engagements alike.

We keep growing: ten people work in our Szeged office and four in Budapest.

Discretion. Reliability. Quality.

Non-negotiable, whatever the job.

Why choose us?

  1. 01

    Experience

    Our people are experienced professionals who apply our methods with real expertise.

  2. 02

    Up to date

    We use the most current tools and methods in our development, testing and consulting work.

  3. 03

    Reliability

    We do every job with our client’s interests in mind, guided by discretion, reliability and quality.

Our team’s certifications

The team’s spectrum – every peak is an international certification.

Live measurement 0 counts live time 0.0 s
  • OSEEOffensive Security Exploitation ExpertOffSec
  • OSCEOffensive Security Certified ExpertOffSec
  • OSWEOffensive Security Web ExpertOffSec
  • OSCPOffensive Security Certified ProfessionalOffSec
  • OSWPOffensive Security Wireless ProfessionalOffSec
  • CEHCertified Ethical HackerEC-Council
  • CISMCertified Information Security ManagerISACA
  • ISTQB ALAdvanced Level Security TesterISTQB
  • ISTQB FLFoundation Level Security TesterISTQB

Partners

  • Magyar Posta
  • AccessData FTK
  • NN
  • Cisco
  • FireEye
  • Wizz Air
  • Gargoyle Investigator
  • OPSWAT

04 — Careers

Join us in Szeged or Budapest!

We believe in meeting in person: we tell you about the company, the projects and the work, and you meet your future colleagues and see where you would work. We want to learn what motivates you, what kind of work you are after, which tech stack you know and how well. Your personality matters to us as much as your skills – so we can find a common language.

What our colleagues say

I like working here because there is always a new challenge. The team sticks together, our skills cover a really wide spectrum and we learn from each other. We have research days, the bosses are great and do everything for good working conditions – not to mention our very unusual team-building events.

Bálint · Szeged

I work on challenging projects, I am free to choose the technologies, and the company gives dedicated time and resources for learning. The office is young and friendly, and I learn a lot from the people here.

Ádám · Szeged

We make technical decisions together. We work on varied, modern stacks. And the coffee is good. :)

András · Budapest

I like it here because I get to work on interesting projects with modern technologies. The team is professional and helpful, and the working environment is flexible.

Patrik · Budapest

How we hire

  1. 01

    We read your CV and always get back to you, by phone or in writing.

  2. 02

    A short phone call with HR about the basics.

  3. 03

    A technical conversation, online or in person.

  4. 04

    Meeting the team in person.

Open positions 10

DBA / Database Administrator (MSSQL / PostgreSQL / Oracle) BudapestHybrid · 2 office days a weekAt a partner

Our Budapest partner is growing and looking for a database administrator in a hybrid role (two office days a week), as a permanent employee – ideally with MSSQL and PostgreSQL experience and openness to learning Oracle. You would work for clients running critical infrastructure, on the service provider side.

If you have a few years of experience running databases on Linux and/or Windows and want to extend your skills to more database engines alongside experienced DBAs, we would love to hear from you! Two rounds of technical interviews; start date negotiable, even with a longer notice period.

Requirements

  • 2–4+ years of relevant database operations experience
  • Confident operation of at least one engine (Oracle, MSSQL or PostgreSQL)
  • Intermediate English
  • Hands-on knowledge of backup and restore principles and tools (e.g. RMAN, SQL Server backup, pg_dump / pgBackRest)
  • Basic Linux and/or Windows Server administration
  • Solid SQL
  • Basic scripting (Bash or PowerShell)
  • Good communication, client-focused thinking
  • Willingness to learn, independent work

Nice to have

  • Experience with several engines, on both Linux and Windows
  • Fluent English
  • Category B driving licence
  • High-availability solutions (Data Guard, Always On, PostgreSQL replication)
  • Vendor certifications (e.g. Oracle OCA/OCP, Microsoft DP-300) or working towards one
  • Cloud database services (Azure SQL, Amazon RDS)
  • Automation with Python or Ansible
  • Daily, deliberate use of AI tools (e.g. Microsoft Copilot, ChatGPT, Claude, GitHub Copilot), with the results reviewed professionally
  • Awareness of AI data security limits: client data, passwords and production configuration never go into public AI services without approval

What you will do

  • Daily operation and monitoring of Oracle, Microsoft SQL Server and PostgreSQL on Linux and Windows Server
  • Checking backups, performing restores and restore tests
  • User and permission management, database objects
  • Preparing and installing patches and minor upgrades in maintenance windows
  • Performance and storage monitoring, basic tuning, finding slow queries
  • Handling incidents, requests and changes the ITIL way, escalating to the senior team when needed
  • Handling alerts from monitoring systems (e.g. Zabbix, Grafana, Oracle Enterprise Manager)
  • Automating repetitive operational tasks
  • Writing and maintaining operational documentation and runbooks
  • On-call duty (one week a month, after probation)
Apply
Commercial Director (Food, FMCG Industry) BudapestHybridAt a partner

Our partner, a food distributor, is looking for an experienced Commercial Director in Budapest, as a permanent employee in a hybrid role.

Please apply only if you have 5+ years of leadership experience in the food and FMCG sector. People management is key: we are looking for a leader who develops the team, delegates effectively, tracks performance and holds people accountable for results.

Requirements

  • 5+ years of leadership experience in the food and FMCG sector
  • Fluent Hungarian and English, spoken and written
  • University degree
  • Confident use of MS Office and ERP systems
  • Strategic thinking and a strong business sense
  • Excellent negotiation and relationship-building skills
  • Strong leadership and team management skills

Nice to have

  • Experience developing food brands or product portfolios
  • Experience in meat, dairy, chilled or frozen products
  • Experience in export markets
  • Work with international retail chains

Responsibilities

  • Shaping and delivering the commercial strategy
  • Leading all sales activity in domestic and export markets
  • Sales planning and delivering growth targets
  • Finding new sales channels and market opportunities
  • Leading negotiations with key partners and retail chains
  • Building and developing strategic partnerships
  • Tracking market trends and reporting to senior management

What we offer

  • Competitive pay and an annual performance bonus based on agreed KPIs
  • Company car for private use, with a contractual private mileage allowance
  • A leadership role at a stable, growing company
  • A strategic role in the company’s growth
  • Long-term employment, hybrid working
Apply
SAP FI Consultant Budapest1–2 office days a weekAt a partner

We are growing and looking for an SAP FI consultant – full-time, permanent, one or two office days a week (negotiable), long term, directly in the team of our partner, an SAP partner with premium status.

What we are looking for: SAP FI implementation experience (FI-GL, FI-AR, FI-AP), SAP S/4HANA implementation experience, flexibility and independence. Two rounds of technical interviews; start date negotiable. Our partner is a stable, internationally recognised company with a secure private-sector client base.

Requirements

  • Medior or senior level, 3+ years of SAP FI implementation experience (FI-GL including taxes, FI-AR, FI-AP)
  • SAP S/4HANA implementation experience
  • Knowledge of enterprise business processes
  • University degree
  • Intermediate, active English

Nice to have

  • Experience with FI-BL, FI-CJ and FSCM-CLM
  • A degree in finance or accounting
  • Chartered accountant qualification
  • Official SAP FI certifications
  • Fluent English

Responsibilities

  • Complex enterprise SAP FI implementation, integration and support projects
  • Gathering client requirements
  • Conceptual design and specifications
  • Client support, advice and bug fixing
  • Pre-sales support and proposals

What we offer

  • 1–2 office days a week in Budapest (negotiable)
  • Full-time permanent employment, 40 hours a week
  • Complex, demanding enterprise projects
  • Health insurance
  • Competitive pay that matches your experience
Apply
Senior IT Project Manager BudapestHybrid · 2 office days a week

We are growing and looking for a Senior IT Project Manager to join a team of five PMs in Budapest, two office days a week. Two rounds of interviews, and you can start right away – full-time, permanent.

You would coordinate an expected 3–6 development, infrastructure and support projects for banking and insurance clients. The focus is coordination – you do not need to read code, but you should know the basics. If you have run middleware and integration projects as well as development projects (Java, .NET, Angular), you are who we are looking for!

Requirements

  • 4+ years as an IT project manager (ideally development, middleware and integration projects)
  • Fluent English (Hungarian and international projects)
  • Independence, initiative, client focus
  • Problem solving, structured thinking
  • University degree

Responsibilities

  • Project planning and scheduling
  • Tracking and controlling project costs
  • Assessing and managing risks
  • Project documentation
  • Liaising with the client during delivery
  • Preparing proposals
  • Reporting to the PMO and management

What we offer

  • Stable base salary and pay rises
  • Long-term, full-time permanent employment
  • Two office days a week
  • Team events
Apply
Information Security Officer (IBF) BudapestPermanent

We are looking for an Information Security Officer to join our Budapest team as a permanent employee: someone who can build and run information security in a transparent, regulated and verifiable way.

The role centres on security controls, risk management, documentation and regulatory compliance – especially the NIS2 directive and Hungarian cybersecurity law. If you want a role where you do not just solve individual security tasks but genuinely shape a working, auditable information security system, we would love to hear from you.

Requirements

  • 2–5 years of relevant experience in IT security, IT operations or compliance
  • A relevant degree or certification
  • Knowledge of information security principles and controls
  • Confident spoken and written English
  • Experience handling security incidents
  • Experience writing policies, procedures and auditable documentation

Responsibilities

  • Information security governance: building, maintaining and improving principles, policies and control frameworks; creating and tracking the IT security roadmap; running the ISO role at group level
  • NIS2 and Hungarian cybersecurity compliance: applying the requirements in practice, running the risk, control and documentation processes, supporting regulator and audit requests
  • Risk management and audit: identifying, assessing and documenting risks, preparing and supporting internal audits, keeping audit-ready records
  • Access and permission management, incident handling, business continuity

What we offer

  • Cafeteria allowance (HUF 450,000 gross per year)
  • Bonus equal to one month’s salary
  • Health insurance
  • Health fund contribution
  • Paid time and budget for certifications and training
  • Permanent employment
  • Team events several times a year
  • Competitive pay that matches your skills
Apply
Fullstack developer (.NET/Node.js & Angular/React/Vue.js) BudapestHybrid · 3 office days a week

We are growing our software development business in Budapest and looking for an enthusiastic developer with 1–3 years of experience who loves learning: full-time, permanent, three office days a week, on a large greenfield project (main stack: .NET 10, Angular 21).

You would work on varied projects – for example a complex banking customer support system or our own applications – in hybrid Scrum, in a small team of back-end and front-end developers. Senior colleagues mentor you, and you are free to choose the technologies.

Hiring starts with a short HR phone call, followed by an online technical interview with a senior developer and then an in-person technical interview. We value independence, fluency with AI tools and openness to new technologies. Start date negotiable.

Requirements

  • 1–3 years of fullstack development experience
  • Ideally .NET and Entity Framework Core (Node.js, Java or Python is a plus)
  • JavaScript experience: Angular, React or Vue.js
  • Git and GitHub
  • SQL databases (NoSQL experience is a plus)
  • Basic DevOps and Linux
  • Openness to other languages and varied stacks
  • Using modern AI tools effectively to speed up your work

What we offer

  • Cafeteria allowance (HUF 450,000 gross per year)
  • Bonus equal to one month’s salary
  • Health insurance
  • Health fund contribution
  • Paid time and budget for certifications and training
  • Permanent employment
  • Team events several times a year
  • Competitive pay that matches your skills
Apply
OT Cybersecurity Engineer Budapest + client sitesJunior · medior · seniorAt a partner

Coming from IT/OT and interested in cybersecurity? Or an experienced security specialist looking for a complex engineering challenge? Our partner is hiring junior, medior and senior engineers with 1–5+ years of relevant, OT-focused experience.

Two days a week you work at client sites in Hungary; the rest of the week from home or our Budapest office. You will help keep the company’s IT and OT environment secure, continuous and controlled: security monitoring and vulnerability assessment of the whole IT infrastructure, mail and server systems, network, large storage systems, endpoints and OT systems.

You do not need to be an expert in everything: we are looking for a strong foundation to build on. As a junior, apply even without deep OT security experience; as a medior you assess OT environments independently; as a senior you own complex IT/OT work and support colleagues and clients.

Requirements

  • 1–5 years of information security experience (OT)
  • Fluent English (another language is a plus)
  • A degree in engineering or IT
  • Strong IT infrastructure knowledge: server, network and mail systems, large storage
  • Windows and Linux security
  • Network and network security technologies
  • Penetration testing methods and tools
  • Vulnerability management and risk assessment
  • Hardware, firmware and embedded security
  • How OT/ICS/SCADA systems work and their security specifics
  • IT/OT network architectures and segmentation
  • Incident handling and applying security standards

Key responsibilities

  • Uncovering cybersecurity risks across the whole IT/OT environment
  • Continuously tracking the security posture of critical systems
  • Identifying, documenting and prioritising vulnerabilities
  • Technical support and investigation of incidents
  • Security improvement and recovery plans
  • Reviewing security controls between IT and OT
  • Supporting cybersecurity audits and compliance assessments
Apply
Medior/Senior SAP SuccessFactors Consultant BudapestHybrid · 2 office days a week

We are growing and looking for medior and senior SAP SuccessFactors consultants in Budapest – two office days a week, full-time, permanent and long term. You would work on large finance, banking and enterprise projects, in Hungary and internationally (no time-zone shift). Start right away, or after a 30–60 day notice period.

Requirements

  • 3–5+ years of key-user or consulting experience with SAP SuccessFactors (e.g. Employee Central, Onboarding, Recruitment, Compensation, Payroll)
  • Ideally Employee Central experience
  • Knowledge of enterprise business processes
  • Fluent English and Hungarian
  • Good communication and presentation skills, a consultant’s attitude
  • Responsible, precise work

Nice to have

  • SAP SuccessFactors / SAP Payroll implementation experience
  • SAP SuccessFactors certification
  • People Analytics, Report Stories
  • Integration with other systems
  • German

Responsibilities

  • Complex enterprise SAP SuccessFactors implementation, integration and support projects
  • Gathering client requirements
  • Conceptual design and specifications
  • Functional and integration testing and documentation of the half-yearly releases
  • Client support, advice and fixes
  • Pre-sales support and proposals
  • Knowledge sharing and improving the consulting methodology

What we offer

  • Two rounds of technical interviews
  • Premium health insurance
  • Paid certification exams
  • Competitive pay that matches your experience
  • Yearly pay review
Apply
Vulnerability Researcher (C/C++, x86/x64 Assembly) Szeged (or Budapest)Permanent

Join us if you recognise yourself in one of these: an experienced C/C++ developer interested in vulnerability research who would like to learn from an outstanding senior colleague – or someone who has already done vulnerability research and codes in low-level languages.

We would prefer you in our Szeged team, but if Budapest is easier for you, apply anyway. The focus is Windows and desktop applications, not the web. Be independent, bring your own ideas and direction; persistence matters, and so does not being put off by dead ends – document where you went, what you did and why, and what comes next.

Two rounds: a technical conversation, then a technical interview with an exercise. Start date negotiable, right away or after a 30–60–90 day notice period. Our people hold OSEE, OSCP, OSCE, OSWP and OSWE among others – we pay for certifications and training, in time and money.

Requirements

  • Confident C/C++ development experience
  • An eye for coding mistakes
  • Low-level programming: C/C++, x86/x64 Assembly
  • Experience in, or a keen interest in, vulnerability research
  • Windows experience
  • IDA Pro / Ghidra / radare2
  • Patch diffing (BinDiff)
  • Independence and persistence
  • English and Hungarian

Nice to have

  • Fuzzing
  • JavaScript
  • Familiarity with Phrack

What we offer

  • Cafeteria allowance (HUF 450,000 gross per year)
  • Bonus equal to one month’s salary
  • Health insurance
  • Health fund contribution
  • Paid time and budget for certifications and training
  • Permanent employment
  • Team events several times a year
  • Competitive pay that matches your skills
  • Flexible hours
Apply
Penetration tester (web/API) Budapest / SzegedHybrid · 3 office days a week

We are hiring penetration testers for the long term, as permanent employees, in two tracks: experienced pentesters who want to grow in web/API testing – and colleagues open to pre-sales, with some pentesting experience, a solid IT security background and good communication skills, who enjoy talking to clients alongside the technical work.

Our projects focus on IT security R&D, vulnerability assessment and market-driven development, and we work with AI too. You will plan penetration tests for complex environments, mainly for telco and financial clients: hardware, software, web and API testing – the web is the current focus. You are free to choose your technologies, so working independently matters.

Two rounds of technical conversations. Start date negotiable, right away or after a 30–60–90 day notice period. We pay for certifications and training, in time and money.

What you need

  • 2–5 years of penetration testing experience
  • A clean criminal record certificate
  • Experience writing reports in English and Hungarian
  • Web and API testing (OWASP, Burp)
  • Testing Active Directory environments
  • Scripting (e.g. Python, PowerShell, Bash)
  • Networking and protocols
  • Cryptography (encryption, hashing, certificates)
  • OSCP certification
  • Experience with EDR, IPS and IDS
  • An independent, creative problem solver
  • Eager to keep learning

Nice to have

  • Any red-team certification or badge
  • Cloud experience (Azure, AWS, GCP)
  • Mobile penetration testing (iOS, Android, Huawei)

What we offer

  • Cafeteria allowance (HUF 450,000 gross per year)
  • Bonus equal to one month’s salary
  • Health insurance
  • Health fund contribution
  • Paid time and budget for certifications and training
  • Permanent employment
  • Team events several times a year
  • Competitive pay that matches your skills
  • Flexible hours
  • Hybrid work (3 office days a week, 1051 Budapest, József nádor tér 5-6.)
Apply

Our main tech stack

  • C#
  • .NET
  • Entity Framework
  • C++
  • Python
  • JavaScript
  • Angular
  • React
  • Tailwind
  • Linux
  • Windows

Nothing that fits?

Send us your CV or LinkedIn profile with a few lines about the role and the office you are interested in.

Send your CV

Developers: press the ` key.

05 — Contact

Let’s talk before someone else tests you.

Write or call us – your enquiry is handled in confidence.

Registered office

Budapest

1051 Budapest
József nádor tér 5-6.
Map

Office

Szeged

6725 Szeged
Boldogasszony sugárút 63.
Map

gammaorg — terminal