Senior Consultant Penetration Testing leveraging hacking skills for a Security Consulting firm. Collaborating with clients to enhance IT security in various projects.
Responsibilities
Apply your hacking skills effectively in web, mobile app, and infrastructure penetration tests or Red Teaming engagements — both remotely and on client sites
Explain test results in detailed project reports and persuade clients with recommendations to improve their IT security
Continuously work on new topics and familiarize yourself with current technologies, contribute to the development of internal tools or systems, and explore new tactics, techniques, and procedures (TTPs)
Stay up to date through company-sponsored conferences, training, experiments, regular knowledge transfers, and joint internal CTF and Hack The Box sessions
Gain exposure to adjacent areas such as incident response/forensics or configuration audits
Contribute ideas for new projects and play a tangible role in building and expanding our client relationships
Requirements
Several years of experience and broad technical knowledge across various areas (e.g., network fundamentals, operating system basics, cloud platforms, Active Directory, databases, firewalls, web technologies and their common security issues)
Experience with intercepting proxies (e.g., Burp), C2 frameworks (e.g., Cobalt Strike), vulnerability scanners and common operating systems, and a desire to quickly become proficient with new tools
Routine in preparing reports and presentations in German and the ability to communicate content clearly
A university degree or professional experience in this field, relevant certifications, or self-taught expertise, with the willingness to deepen your domain knowledge
Benefits
Eco-friendly commuting: We subsidize not only your company bike (JobRad) but also your public transport (ÖPNV) ticket, saving the environment and your wallet.
Stay active: We support your gym membership and preventive health care.
Maximum flexibility: We enable you to balance family and work according to your needs, with the option to work remotely.
Time to recharge: We offer 30 days of vacation per year. Take Christmas Eve and New Year's Eve off with just one day each. If you want a longer break, we offer the option of a sabbatical.
Cybersecurity Engineer at Mythics implementing Zero Trust security architecture for federal systems. Collaborating with senior engineers on secure data movement and vulnerability remediation.
Lead Information Security Engineer focused on phishing mitigation in Cybersecurity at Wells Fargo. Engaging in threat detection and incident response across various teams.
Principal Engineer implementing generative AI for cybersecurity at Wells Fargo. Act as a strategic advisor to leadership while overseeing security and AI initiatives.
IT & Cybersecurity Manager leading IT infrastructure and cybersecurity efforts at knok. Ensuring secure, scalable systems to support the digital transformation of healthcare.
Security Systems Technician maintaining physical security technologies and supporting enterprise security operations. Ensuring system integrity and compliance through troubleshooting and vendor collaboration.
IT Security Expert creating and managing SIEM solutions to strengthen Europe's defence capabilities. Collaborating in a small elite team to solve significant security challenges rapidly.
Senior Manager in Regulatory Compliance ensuring effective risk management within the Information Security Group. Overseeing regulatory compliance and governance while leading automation efforts.
Information Security Engineer overseeing security tasks, ensuring implementation of security controls. Collaborating with legal and technical teams in a professional office environment.
Security Administrator managing security across cloud and on - premises environments at Homecare Homebase. Collaborating with teams for patient care systems security and compliance.
Principal Security Engineer shaping security strategy for enterprise IT systems and software products at RedCloud. Leading a team to ensure robust security practices for business growth.