Senior Consultant Penetration Testing focusing on security consulting and vulnerability assessment in a growing consulting firm. Collaborating with clients on cybersecurity issues and incident response.
Responsibilities
Apply hacking skills in the form of web, mobile app and infrastructure penetration tests or Red Teaming projects — remotely and on client sites
Explain test results in detailed project reports and convince clients with recommendations to improve their IT security
Continuously take on new topics and learn current technologies, contribute to the development of internal tools or systems, and explore new tactics, techniques and procedures (TTPs)
Stay up to date through company-funded conferences, training, experiments, regular knowledge transfers, and joint internal CTF and HackTheBox sessions
Gain exposure to related areas such as incident response/forensics or configuration audits
Contribute ideas for new projects and play a visible role in building and expanding our client relationships
Requirements
Several years of experience and broad technical knowledge across different areas (e.g., how networks operate, operating system fundamentals, cloud platforms, Active Directory, databases, firewalls, web technologies and their typical security issues)
Experience using intercepting proxies (e.g., Burp Suite), C2 frameworks (e.g., Cobalt Strike), vulnerability scanners and common operating systems, and a willingness to become familiar with new tools quickly
Routine in producing reports and presentations in German and the ability to communicate technical content clearly
University degree or professional experience in this field, relevant certifications or self-taught expertise with the willingness to develop deep subject-matter knowledge
Benefits
Environmentally friendly commuting: We subsidize not only your company bike (JobRad) but also your public transport pass, helping the environment and your wallet
Stay active: We support your gym membership and preventive health care
Maximum flexibility: We enable the reconciliation of family and work according to your needs, with the option for mobile working/remote work
Time to relax: We offer 30 days of vacation per year. You only need to take one vacation day for Christmas Eve and New Year's Eve. If you would like a longer break, we offer the possibility of a sabbatical
Consultant for Phishing Security working with a Swiss bank to enhance IT - security. Involves development of phishing simulations and training for cybersecurity awareness.
Linux Kernel & Security Developer in Mobileye’s Autonomous Driving Software Group designing secure embedded software solutions. Collaborate with engineers to enhance security in automotive technologies.
Experienced Security Linux Kernel Engineer designing secure embedded software for autonomous vehicles. Researching and implementing Linux kernel drivers with a focus on security innovations.
Linux Kernel & Security Developer designing and implementing secure embedded software solutions at Mobileye. Work with talented engineers on cutting - edge innovations in automotive technologies.
AI Security Engineer at Cross River designing secure AI systems to protect customer data and meet regulations. Focusing on scalable guardrails and tools for innovative financial technology.
Product Security Engineer securing embedded products, firmware, and industrial components at Rockwell Automation. Focused on firmware security, secure architecture, and secure development lifecycle practices.
Senior Cybersecurity Consultant leading IT - Security projects for SMBs and key accounts in Germany. Responsibilities include project planning, client advisory, and technical implementation.
Security Content Engineer at Securonix building analytics content and threat detection models for their SIEM platform. Collaborating with the Detection Engineering team to combat advanced cyber threats.
IT Infrastructure and Security Administrator for a dynamic construction company ensuring IT security and infrastructure optimization. Responsibilities include project planning, team collaboration, and monitoring security incidents.
Red Team Security Consultant conducting complex Red - Team operations, including technical attacks and security checks for various clients. Collaborating with clients to enhance security measures and reporting findings effectively.