Senior Penetration Tester - Remote

Overview

We are currently a young team with motivated penetration testers looking for experienced penetration testers to deepen the knowledge in the existing portfolio. Additionally, we aim to expand the current portfolio with new topics in the long term. Besides the classic work around penetration testing for clients, we are driving internal collaboration with other departments to build a common lab environment (Red vs. Blue) for joint projects.

In Short

• Conduct classic penetration tests of IT infrastructures, Active Directory (on Prem & Azure), cloud solutions (primarily Azure & AWS), web applications, and mobile applications (iOS & Android).
• Develop social engineering (phishing/vishing) attacks and write exploits for spear-phishing attacks.
• Execute Red Team operations both remotely and on-site (perimeter security).

Requirements

• At least 5 years of professional experience as a penetration tester of network infrastructures, web applications/web services, rich clients, iOS/Android apps, and initial Red Team experience.
• Extensive programming knowledge (e.g., C/C++) for developing exploits for phishing/Red Team audits.
• Proficient in common Red Team tools like C2 frameworks (Silver/Cobalt Strike).
• Certifications such as PNPT/CRTE/CARTE/OSCP/OSWP/OSCE/OSEE/OSWE are advantageous.
• Publications in the IT security field, such as advisories or articles in reputable media, are desirable.
• Motivated, creative & open personality with a cooperative, team-oriented working style and a convincing demeanor.
• Fluent in German and proficient in English, both written and spoken.
• Flexibility and willingness to travel (currently about 15 days a year).

Benefits

• Open-hearted, respectful, and appreciative communication culture.
• Exciting and diverse tasks paired with a great and supportive team.
• Structured onboarding and intensive training.
• Options for mobile work and flexible working time models.
• Opportunities for creative work, personal development, and interesting training options.
• Attractive employee benefits.
• Employee referral program.
• Modern IT equipment provided.
• Open culture and team events.