This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Cybersecurity Penetration Tester will work with project teams to ensure applications meet our security policies.
Job Responsibility:
Understand project deliverables and application details
Run automated and manual security checks (not limited to tools) to uncover security weaknesses in the system
Propose mitigation steps for identified risks and threats
Provide clear recommendations from a security perspective based on understanding of application, application risk and business context, and results of checks performed
Work alongside with the cybersecurity community and application teams
Explore process, reporting and improvement in techniques
Ability to collaborate with other penetration teams to align in knowledge, tools and techniques
Requirements:
Min 3+ years of experience in penetration testing of Web, Mobile (iOS & Android), API, Thick client & Network
Certifications - OSCP, OSCE, GPEN, GXPN, GICSP, GWAPT, OSWP, etc.
Security – Web, Mobile, API, Cloud and Container, Thick Client, Network, Operating System etc.
Applications Development & Delivery
Pentest standards and methodologies, OWASP, SANS etc.
Subject matter expert in web/mobile/thick client/API assessments
Good understanding of server vulnerabilities (Linux, Windows) and hardening
Familiarity with cloud platforms, and cloud container security
Efficient and effective usage of pentest tools as well as demonstrate less dependency on tools
Experience with automation, scripting (Python, Perl, Ruby, etc.)
Strong written and verbal communication skills
Requirements Gathering and Analysis
Interpersonal Skills, proactiveness
Nice to have:
Understanding or experience on any of the following is an advantage: Cloud Security Assessment and Security Audits of Cloud Environment
Vulnerability Management (Process, Tools and Metrics)
NIST Cybersecurity Framework
Critical Security Controls (CSC)
Expertise in DevSecOps methodologies is also an advantage
Proactive interest in emerging technologies (e.g. Offensive AI) and techniques related to penetration testing
Ability to translate technical security topics in a business-friendly manner
DevSecOps implementation and supporting security tooling (SAST)