BALTUM

BALTUM Bureau is an internationally operating accredited certification body and audit firm, headquartered in Tallinn, Estonia. Founded to serve the growing demand for independent ISO certification and compliance auditing, BALTUM Bureau has established itself as a trusted partner for technology companies, SaaS providers, financial institutions, and enterprises across the European Union, United Kingdom, and United States.

Our organisation is built on a foundation of technical expertise, professional independence, and a commitment to delivering rigorous, high-quality audit services. 

Our areas of expertise include:

Management System Certification - ISO/IEC 27001 (Information Security), ISO 9001 (Quality Management), ISO 22301 (Business Continuity), ISO 42001 (AI Management Systems), ISO 27701 (Privacy Information Management)

Regulatory Compliance Assessments - DORA (Digital Operational Resilience Act), NIS2 Directive, GDPR, EU AI Act

BALTUM is a cybersecurity and compliance consulting company. We are looking for a freelance penetration tester to collaborate on client projects.

What we offer:
- Project-based engagement (part-time/freelance)
- Projects: web/API pentest, network assessment, cloud security review
- You work as a subcontractor - we handle client communication
- Upfront payment on first projects
- Opportunity for ongoing collaboration as demand grows

Responsibilities:
- Conduct web, API, network, and infrastructure penetration tests
- Prepare professional reports (Executive Summary + Technical, CVSS scoring)
- Provide remediation recommendations
- Communicate findings clearly in written form

Requirements:
- Real commercial pentesting experience (1+ engagements)
- Proficiency with: Burp Suite, Nmap, Metasploit, or similar tools
- Knowledge of OWASP Top 10
- Ability to write clear technical reports in English
- Must have FOP (private entrepreneur) or equivalent for invoicing