Senior Consultant Penetration Testing for a growing consulting firm. Involves tackling security challenges and improving client IT security.
Responsibilities
Apply hacking skills through web, mobile app, and infrastructure penetration tests or Red Teaming engagements—remotely and on client sites.
Explain test results in detailed project reports and persuade clients with recommendations to improve their IT security.
Continuously take on new topics and learn current technologies, contribute to the development of internal tools or systems, and explore new tactics, techniques, and procedures (TTPs).
Stay up to date through company-supported conferences, training, experiments, regular knowledge-sharing sessions, and internal CTF and Hack The Box activities.
Look into adjacent areas such as incident response/forensics or configuration audits.
Propose ideas for new projects and actively contribute to building and expanding our client relationships.
Requirements
Several years of experience and broad technical knowledge across multiple areas (e.g., how networks operate, operating system fundamentals, cloud platforms, Active Directory, databases, firewalls, web technologies, and their common security issues).
Experience with intercepting proxies (e.g., Burp), C2 frameworks (e.g., Cobalt Strike), vulnerability scanners, and common operating systems, plus a desire to quickly learn new tools.
Routine in preparing reports and presentations in German and the ability to communicate content clearly.
University degree or professional experience in this field, relevant certifications, or self-taught expertise with the willingness to deepen subject-matter knowledge.
Benefits
We subsidize not only your company bike but also your public transport pass to save both the environment and your wallet.
We support your gym membership and health care.
We enable work–family balance according to your needs, including the option for mobile working.
We offer 30 days of vacation per year. Take Christmas Eve and New Year’s Eve off with just a single additional day. If you want a longer break, we offer the option of a sabbatical.
Expert Network Security Engineer at DXC Bulgaria, supporting network security services for enterprise customers. Collaborating on critical infrastructure and ensuring reliable service delivery in evolving environments.
Cyber Security Manager at Leonardo handling strategic cyber security for high - profile clients. Collaborating with C - Level executives and internal teams to develop risk - based security strategies across diverse sectors.
Systems Security Engineer ensuring the security of unmanned systems critical to Navy and Marine Corps operations. Develop security solutions to protect against cyber threats in contested environments.
Network Security Engineer maintaining network stability and security at Clearwater Paper. Responsible for operational support, troubleshooting, and security administration across enterprise networks.
Analista de Application Security Pleno ensuring code integrity and security at Evertec, a tech company for the financial sector in Brazil. Responsible for security scanning, remediation support, and CI/CD integration.
Senior Application Security Analyst ensuring code integrity and security at Evertec, leading security strategies and initiatives in software development.
Senior Principal Security Engineer at Workday acting as technical contact for Enterprise Security. Bridging cybersecurity strategy with hands - on execution to tackle complex security challenges.
Leitung des Sachgebiets Infrastruktur und Sicherheit mit Verantwortung für den Betrieb der technischen Basisdienste. Enger Austausch mit Amtsleitung und Fachbereichen zur IT - Strategie der Stadt Elmshorn.
As a Producer, support the Senior Producer in delivering AAA projects for Behaviour Interactive, a gaming industry leader. Collaborate with the leadership team to ensure high - quality product alignment.
Business Information Security Officer responsible for ensuring cybersecurity compliance in Europe for Boeing. Leading regional security initiatives and managing relationships with stakeholders across the continent.