Work with us
We're a small team of experienced security professionals who enjoy solving real problems, not just writing reports about them.
We work directly with our clients, without layers of management in between. We're independent of vendors, which means we can focus on finding the right solutions rather than selling products.
Our work brings technical security and governance together. Good security advice requires both a deep understanding of how things actually work and the ability to explain why they matter.
If you enjoy taking responsibility, asking good questions and working with people who know their craft, you'll probably feel at home here.
Interested in joining us?
We're always happy to hear from talented people who share our passion for security.
- Explore the opportunities. Positions marked “Open position” are available now. The other roles reflect the skills and profiles we're interested in, and we'd love to hear from you for future opportunities.
- Work closely with your colleagues and clients. We're a hands-on team based in Herlev, working together at our office and on-site with clients. All positions are office-based.
- Ready to work in Denmark. You'll need an existing right to work in Denmark, as we're currently unable to sponsor work permits.
- Tell us what makes you tick. We'd love to hear what interests you about PB Security, what you're passionate about, and what you'd bring to the team. We value a genuine introduction far more than a polished, generic application.
Senior Offensive Security Consultant Open position Full-time · Herlev
Offensive and purple team work from our Herlev office: deep, hands-on testing of live client environments, and helping the people who own them close what you find. You would carry the technical lead on engagements, and say what our tooling should look like.
What you would be doing
- Carry out advanced penetration tests across web applications, APIs, networks, and cloud and on-premise environments, and document each finding so it can be acted on
- Validate fixes through re-testing and support client teams through remediation
- Run purple team engagements where that is what the client needs
- Contribute to the tools, scripts and testing methodologies the team works from
- Carry the technical lead on engagements
- Keep current with emerging threats, vulnerabilities and attack techniques
What we look for
- Five or more years of hands-on experience in offensive security; OSCP, OSEP, OSCE, CRTO, GXPN, eCPTX or an equivalent certification is welcome
- Strong knowledge of web application security, including the OWASP Top 10, API security and authentication flaws
- A solid understanding of network protocols, of Linux and Windows, and of at least one of AWS, Azure and GCP
- Strong skills in at least one scripting or programming language, such as Python, Bash or PowerShell
- The ability to explain a complex security issue clearly to both a technical and a non-technical audience
- The work is done from our Herlev office and on client sites in Denmark, so you are based here or ready to relocate, with a clean police record and the ability to pass a security background check
Apply for this role Send your CV, and tell us when you could start.
Penetration Tester Herlev
This is a profile we are always glad to hear from: a penetration tester who treats a finding as the start of a conversation, not the end of a checklist. The work is testing real environments for real clients and helping them understand not just what is broken, but what it means for their business.
What the work involves
- Plan and carry out authorised penetration tests across networks, web applications, Active Directory and cloud environments
- Verify and safely demonstrate the business impact of each finding, rather than reporting raw scanner output
- Write clear reports that both a technical team and a leadership team can act on
- Work with clients through remediation, and validate that fixes hold
What we look for
- Hands-on experience with offensive security testing and common tooling
- A solid grasp of how Windows, Active Directory and cloud identity are attacked and defended
- The judgement to distinguish a theoretical weakness from a genuine business risk
- Clear written English and the discipline to work within scope and authorisation
- The work is done from our Herlev office and on client sites in Denmark, so it suits someone based here or ready to relocate
- A relevant certification (OSCP or similar) is welcome but not required if the experience is there
GRC Consultant Herlev
This is a profile we are always glad to hear from: a governance, risk and compliance consultant who can turn a framework into something a business actually runs on. The work is helping clients meet ISO 27001, NIS2 and DORA so it supports the business rather than becoming a binder no one opens.
What the work involves
- Run gap assessments and readiness reviews against ISO 27001, NIS2 and DORA
- Build practical governance structures, policies and risk registers that fit the client's size and maturity
- Translate regulatory requirements into a prioritised, realistic roadmap
- Support clients through audits and help them demonstrate evidence with confidence
What we look for
- Experience implementing or auditing against recognised security frameworks
- A working understanding of how NIS2 and DORA apply across different sectors
- The ability to explain risk to a board and to an engineer in their own language
- Strong written English and a structured, evidence-led way of working
- The work is done from our Herlev office and on client sites in Denmark, so it suits someone based here or ready to relocate
- A relevant qualification (ISO 27001 Lead Implementer or Auditor, or similar) is a plus