Cybersecurity / Pentest Engineer

ATS4IT supports its clients in their digital transformation initiatives and AI driven innovations, in different sectors and it's a part MoOngy Group, with over 9,500 employees across Europe, we bring extensive expertise across a wide range of IT domains. With teams in Belgium, Denmark, and a nearshore center in Portugal, we deliver proximity, agility, and real impact across Europe.

Cybersecurity / Pentest Engineer

Location: Luxembourg
Languages: Fluent French and English
Eligibility: A valid EU work permit is mandatory

About the Role

We are looking for an experienced Cybersecurity / Pentest Engineer (French-speaking) to support our client projects by securing and maintaining their e-commerce platforms and DMZ environments.

Profile

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, or a related field.
• Minimum 5 years of experience in Cybersecurity, Penetration Testing, or Application Security.
• Strong analytical and problem-solving mindset.
• Excellent communication skills with the ability to explain technical findings to different stakeholders.
• Ability to work independently and collaboratively within cross-functional teams.
• Detail-oriented with a proactive approach to identifying and mitigating security risks.

Requirements

• Proven experience in web application security testing and penetration testing.
• Deep understanding of OWASP Top 10 vulnerabilities and common attack vectors.
• Experience securing e-commerce platforms such as Magento, Adobe Commerce, Shopify, or similar.
• Hands-on experience with security testing tools including Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, Kali Linux, and Wireshark.
• Experience testing REST APIs, GraphQL APIs, and microservices-based architectures.
• Knowledge of authentication and authorization protocols such as OAuth2, OpenID Connect, SAML, and JWT.
• Strong understanding of network, cloud, and infrastructure security concepts.
• Experience performing vulnerability assessments and producing detailed security reports.
• Familiarity with secure development practices and Security by Design principles.
• Relevant certifications such as OSCP, CEH, OSWE, or CISSP are considered a plus.

Key Responsibilities

• Perform comprehensive penetration testing of web applications, APIs, and e-commerce platforms.
• Conduct security assessments of Magento-based applications and supporting infrastructure.
• Identify, analyze, validate, and report security vulnerabilities, including OWASP Top 10 risks.
• Execute manual and automated security testing on B2B and B2C websites.
• Assess authentication, authorization, session management, and access control mechanisms.
• Review payment workflows and third-party integrations to identify potential security weaknesses.
• Evaluate application architecture from a security perspective and provide improvement recommendations.
• Collaborate with development, infrastructure, and business teams to support vulnerability remediation.
• Ensure compliance with security best practices, standards, and internal security requirements.
• Contribute to the continuous improvement of the organization's cybersecurity posture.

What We Offer

• Permanent Contract (CDI) – Long-term stability.
• Attractive salary based on your experience and skills.
• Additional benefits: Meal vouchers and eco-vouchers (electronic), DKV hospitalization insurance, company laptop, holiday allowance, and year-end bonus.
• Free training (technical, behavioral, language) and certifications.
• Continuous and personalized career progression support.
• Opportunities to work on projects with cutting-edge technologies.

At Moongy Group, we stand for equality and diversity. We create a safe and inclusive environment where opportunities are equal for everyone! We do not discriminate based on age, ethnicity, gender, disability, sexual orientation, or any factor other than merit. If you have the skills for the role, we encourage you to apply!