Cyber Security Consultant / Penetration Tester
Summary
A cybersecurity consultant who performs penetration tests and security audits for clients across networks, infrastructure, web/mobile applications, and source code, then documents findings in client-facing reports. Requires 4+ years in IT security, pentest certifications (e.g. OSCP, GIAC), and Italian/English writing skills.
Location:
- Actively perform intrusion tests for our clients: internal / external intrusion tests, application and web application tests;
- Conduct security tests on web-based applications, mobile apps, networks, and other types of computer systems;
- Perform security reviews of application designs, source code, covering all types of applications;
- Conduct security audits from both a logical, theoretical and technical standpoint;
- Researching known vulnerabilities within our clients software and hardware stacks;
- Although it is necessary to run pre-determined types of tests, you will also be designing your own test scripts;
- Fill out assessment reports on what was discovered and translate this into a comprehensive report for the customer.
Requirements
- As a cybersecurity professional you have the necessary knowledge of current best practices combined with out-of-the-box thinking.
- Good knowledge of ICT systems, networks and security technologies: Operating system security, web and mobile application security.
- Proven experience in IT Security and Penetration Testing.
- Certifications in penetration testing (OSCP, OSCE, GIAC, GXPN, GPEN or equivalents).
- Good (technical) writing and presentation skills (Italian, English).
- Good understanding of network concepts and architecture.
- Advanced knowledge of common pentesting tools.
- Good knowledge of common security methodologies, such as OSSTM, OWASP, NIST.
- Minimum 4 years of experience in IT security and preferably experience with application security testing.
- Able to work independently and to deliver qualitative results.
- A knowledge of security in Enterprise solutions (SAP HANA, ERP, SRM, CRM) is a plus.
Benefits
- You get a dynamic team in a stimulating learning environment;
- You are invited to a lot of knowledge-sharing events and stimulated to organize your own;
- You work with Senior and Junior people with different backgrounds that will help you to learn from the best and become a better-rounded consultant;
- Ask for a book, we'll get it;
- Team building travel.
Details