Penetrationstester

🏢 Summary: Seeking a Java backend developer with strong testing expertise to work in an agile team developing JVM-based microservices on Spring Boot. The role includes solution design, implementation, integrations, automated testing, and technical documentation using modern DevOps and CI/CD practices. 🗂️ Requirements: Java backend development experience, Experience with automated testing and test environments, Practical experience with TDD, Practical experience with BDD, Practical experience with DevOps methods, Experience with Groovy, Experience with Spock, Experience with Selenium, Knowledge of microservice architecture, Experience with SonarQube, Ability to work in agile SCRUM teams 📃 Skills: Java, Spring, PostgreSQL, Groovy, Spock, REST, Selenium, TDD, BDD, DevOps, SCRUM, SonarQube, CI/CD, JVM, Microservices 🏢 Description: På vegne af en vores kunder søger vi en Javaudvikler med betydelig erfaring inden for testing. Den ideelle kandidat skal kunne påbegynde arbejdet hurtigst muligt og være villig til at indgå i et samarbejdende team, der anvender allerede besluttede metoder og værktøjer. Hovedopgaverne inkluderer: Refinement og nedbrydning af opgaver Analyse og udarbejdelse af løsningsforslag Kode, bygge og idriftsætte løsningen Udvikle og sikre integrationer til andre systemer Udarbejde og eksekvere automatiserede test Skrive og vedligeholde teknisk dokumentation om løsningen Rådgive og sparre med agile roller og teammedlemmer for at sikre kvalitet i løsningen Udarbejdelse af genbrugelige komponenter til fremtidige AEOI-løsninger, hvor det er muligt Anvendte metoder inkluderer: Agil udvikling, herunder SCRUM Test Driven Development (TDD) Behavior Driven Design (BDD) Domain Driven Design Continuous Integration/Delivery DevOps Løsningen udvikles på en JVM-platform med services på Spring Boot. Vigtige teknologier inkluderer Postgresql, Java 17, Groovy + Spock, samt REST til udveksling af data. Key Requirements: Beherskelse af Java og erfaring med backend udvikling Erfaring med automatiseret test og testmiljøer Praktisk erfaring med TDD, BDD og DevOps metoder Erfaring med Groovy, Spock og Selenium Viden om microservicearkitektur Erfaring med kodekvalitet ved hjælp af værktøjer som SonarQube Nice to Have: Erfaring med Vue.js eller React som front-end teknologier Kompetencer inden for databaseadministration, især PostgreSQL Forståelse for REST API'er

🏢 Summary: Experienced Penetration Tester responsible for planning, executing, and reporting comprehensive penetration tests across network, web, wireless, Active Directory, and physical environments for a public sector IT project. The role includes identifying vulnerabilities, performing realistic attack simulations, assessing compliance, and deriving concrete security improvements. Engagement is long-term and primarily remote within Germany. 🗂️ Requirements: Degree in ComputerScience or completed technical IT training, Minimum 3 years experience in ITSecurity, At least 2 years hands-on PenetrationTesting or RedTeam, Experience in minimum 2 large-scale projects over 250 users, Proven experience in WebApp Pentests Network Pentests or Cloud Pentests, Ability to develop own exploits or PoCs, Knowledge of compliance standards DSGVO BSI NIS, Fluent German language skills 📃 Skills: PenetrationTesting, RedTeam, NetworkSecurity, WLAN, WebSecurity, ActiveDirectory, Python, PowerShell, BurpSuite, Nmap, Metasploit, CobaltStrike, Nessus, OpenVAS, sqlmap, OSCP, GPEN, CEH, eJPT, CREST, CISSP, CISM, Jira, Confluence, SharePoint 🏢 Description: Für das Projekt wird ein erfahrener Penetration Tester (m/w/d) gesucht, der umfassende Penetration Tests plant, vorbereitet, durchführt und nachbereitet. Die Rolle umfasst sowohl technische Sicherheitsanalysen als auch die Ableitung konkreter Maßnahmen zur Erhöhung der IT-Sicherheit. Der Einsatz findet im Umfeld eines großen öffentlichen IT-Dienstleisters statt. Deine Aufgaben: Vor- und Nachbereitung sowie Durchführung abgestimmter Penetration Tests, u. a.: Network Penetration Testing WLAN Penetration Testing Web Application Penetration Testing Active Directory Penetration Testing Physical Penetration Testing Ermittlung bekannter und unbekannter Sicherheitslücken in IT-Systemen und Anwendungen Analyse der Sicherheitslage der IT-Infrastruktur sowie Prüfung der Compliance-Vorgaben (z. B. DSGVO, BSI-Grundschutz, NIS-Richtlinie) Durchführung realitätsnaher Angriffssimulationen zur Risikobewertung Ableitung von Maßnahmen zur Verbesserung der IT-Sicherheit und Präsentation der Ergebnisse Sicherstellung, dass alle Aktivitäten transparent, nachvollziehbar und rechtskonform erfolgen Dein Profil: Abgeschlossenes Informatik-Studium oder eine anerkannte technische Berufsausbildung (z. B. Fachinformatiker) Mindestens 3 Jahre praktische Erfahrung im Bereich IT-Sicherheit, davon mindestens 2 Jahre in Penetration Tests bzw. Red-Team-Übungen Beteiligung an mindestens 2 größeren Projekten (Unternehmen / Behörde mit >250 Mitarbeitenden), z. B. Web-App-Pentests, Netzwerk-Pentests, Cloud-Pentests Gute Deutschkenntnisse in Wort und Schrift Zuschlagskriterien: Umfangreiche Erfahrung in Pen-Tests / Red-Team Mehrere Referenzprojekte Zertifizierungen wie OSCP, GPEN, CEH, eJPT, CREST, CISSP/CISM Erfahrung mit Werkzeugen wie Burp Suite, Nmap, Metasploit, Cobalt Strike, Nessus/OpenVAS, sqlmap, etc. Fähig, eigene Exploits / PoCs zu entwickeln (Python, PowerShell) Erfahrung mit Jira, Confluence, SharePoint Andere Details: Zeitraum: Rahmenvereinbarung bis 2030 Arbeitsort: Remote/Deutschland Bei Interesse freue ich mich auf Deine Bewerbungsunterlagen , Verfügbarkeit und Stundensätze an tamara.petrovic.turkovic@emagine.de

🏢 Summary: Experienced Penetration Tester responsible for planning, executing, and reporting comprehensive penetration tests across network, web, wireless, Active Directory, and physical environments. The role includes realistic attack simulations, compliance assessments, and deriving concrete security improvement measures within a large public IT environment. Engagement is long-term and primarily remote within Germany. 🗂️ Requirements: Completed degree in Computer Science or recognized technical IT training, Minimum 3 years experience in IT security, At least 2 years hands-on experience in penetration testing or red teaming, Experience in at least 2 large-scale projects (>250 users), Proven experience in web, network or cloud penetration testing, Ability to conduct independent security assessments and exploit development, Good German language skills (written and spoken) 📃 Skills: PenetrationTesting, RedTeaming, NetworkSecurity, WebSecurity, WLAN, ActiveDirectory, CloudSecurity, BurpSuite, Nmap, Metasploit, CobaltStrike, Nessus, OpenVAS, sqlmap, Python, PowerShell, Jira, Confluence, SharePoint, OSCP, GPEN, CEH, eJPT, CREST, CISSP, CISM 🏢 Description: Für das Projekt wird ein erfahrener Penetration Tester (m/w/d) gesucht, der umfassende Penetration Tests plant, vorbereitet, durchführt und nachbereitet. Die Rolle umfasst sowohl technische Sicherheitsanalysen als auch die Ableitung konkreter Maßnahmen zur Erhöhung der IT-Sicherheit. Der Einsatz findet im Umfeld eines großen öffentlichen IT-Dienstleisters statt. Deine Aufgaben: Vor- und Nachbereitung sowie Durchführung abgestimmter Penetration Tests, u. a.: Network Penetration Testing WLAN Penetration Testing Web Application Penetration Testing Active Directory Penetration Testing Physical Penetration Testing Ermittlung bekannter und unbekannter Sicherheitslücken in IT-Systemen und Anwendungen Analyse der Sicherheitslage der IT-Infrastruktur sowie Prüfung der Compliance-Vorgaben (z. B. DSGVO, BSI-Grundschutz, NIS-Richtlinie) Durchführung realitätsnaher Angriffssimulationen zur Risikobewertung Ableitung von Maßnahmen zur Verbesserung der IT-Sicherheit und Präsentation der Ergebnisse Sicherstellung, dass alle Aktivitäten transparent, nachvollziehbar und rechtskonform erfolgen Dein Profil: Abgeschlossenes Informatik-Studium oder eine anerkannte technische Berufsausbildung (z. B. Fachinformatiker) Mindestens 3 Jahre praktische Erfahrung im Bereich IT-Sicherheit, davon mindestens 2 Jahre in Penetration Tests bzw. Red-Team-Übungen Beteiligung an mindestens 2 größeren Projekten (Unternehmen / Behörde mit >250 Mitarbeitenden), z. B. Web-App-Pentests, Netzwerk-Pentests, Cloud-Pentests Gute Deutschkenntnisse in Wort und Schrift Zuschlagskriterien: Umfangreiche Erfahrung in Pen-Tests / Red-Team Mehrere Referenzprojekte Zertifizierungen wie OSCP, GPEN, CEH, eJPT, CREST, CISSP/CISM Erfahrung mit Werkzeugen wie Burp Suite, Nmap, Metasploit, Cobalt Strike, Nessus/OpenVAS, sqlmap, etc. Fähig, eigene Exploits / PoCs zu entwickeln (Python, PowerShell) Erfahrung mit Jira, Confluence, SharePoint Andere Details: Zeitraum: Rahmenvereinbarung bis 2030 Arbeitsort: Remote/Deutschland Bei Interesse freue ich mich auf Deine Bewerbungsunterlagen , Verfügbarkeit und Stundensätze an tamara.petrovic.turkovic@emagine.de

🏢 Summary: The offer is for an experienced Penetration Tester to conduct comprehensive security assessments across web, mobile, cloud, infrastructure, and API environments. The role focuses on identifying vulnerabilities, validating security controls, and ensuring compliance with DORA and PCI-DSS through primarily manual testing. The candidate will deliver structured, actionable reports based on recognized security standards and methodologies. 🗂️ Requirements: Minimum 5 years of penetration testing experience, Proven delivery of enterprise-level pentests, Experience with web, mobile, cloud, API, and infrastructure testing, Strong manual exploitation skills, Knowledge of OWASP Top 10, PTES, OSSTMM, Ability to perform grey-box testing, Experience with AWS, Azure, or GCP environments, Ability to produce detailed technical reports, Relevant security certifications (OSCP, OSCE, OSWE, GPEN, GWAPT, CISSP) 📃 Skills: Pentesting, OWASP, PTES, OSSTMM, DORA, PCI-DSS, AWS, Azure, GCP, Android, iOS, React, REST, Swagger, API, ActiveDirectory, Firewalls, VPN, CIS, OSCP, OSCE, OSWE, GPEN, GWAPT, CISSP 🏢 Description: Role Objective The primary objectives of the role are to: Identify security vulnerabilities in external and internal infrastructure/applications. Validate the effectiveness of existing security controls. Ensure compliance with DORA and PCI-DSS regulations. Provide actionable remediation guidance. Scope of Work The Penetration Tester will be responsible for conducting comprehensive penetration tests across the following areas: Asset Type Environment Notes Web applications Staging/Prod Main customer portal, admin panels, complex business-oriented apps Mobile applications Staging/Prod Android/iOS native apps, React Native Cloud environment Production AWS/Azure/GCP, CIS benchmark Thick client apps Production Desktop agents, use of API External infra Production Firewalls, VPN gateways Internal infra Production AD environment, database servers APIs and microservices Staging/Prod REST API provided with Swagger Testing Methodology Manual vs Automated: Emphasis on manual exploitation. Automated scanning should not exceed 20% of effort. Standards: Testing must adhere to OWASP Top 10 for web/mobile apps, PTES, or OSSTMM. Credentials: For grey-box testing, accounts will be provided (e.g., admin, user, viewer) for privilege escalation testing. Key Requirements Proven experience in delivering high-quality pentest services to enterprise clients (at least 5 years of experience delivering pentests) and client references. Team members with relevant certifications (e.g., OSCP, OSCE, OSWE, GPEN, GWAPT, CISSP). High communication quality: clear verbal communication and reporting. Ability to deliver detailed, structured, and actionable reports. Use of industry-standard tools and methodologies.

🏢 Summary: Test Manager/Test Analyst role focused on both leading and executing testing activities for a B2B CRM solution built on Salesforce. The position combines test management responsibilities with hands-on verification of solutions before implementation, working closely with CRM, support, and integration teams. It offers a hybrid setup in Aarhus with potential long-term extension. 🗂️ Requirements: Experience in Test Management, Experience in Test Analysis, Hands-on testing experience, Experience testing CRM solutions, Ability to collaborate with cross-functional teams, Fluency in Danish, Fluency in English 📃 Skills: Salesforce, CRM, TestManagement, TestAnalysis, Integration, DataIntegration 🏢 Description: emagine søger lige nu en Test Analytiker/Test Manager til en af vores partnere. Summary: Denne stilling søger en Test Manager/Test Analyst, der vil dække et bredere område end blot typiske Test Manager-opgaver. Konsulenten vil også engagere sig i testansvar ved at verificere løsninger, før de når ud virksomheden. Denne position fungerer som en bro til at bevæge sig mod en mere defineret TM-rolle uden at kræve den tungeste erfaring; i stedet retter den sig mod en kandidat med noget praktisk erfaring, som ikke er bange for aktivt at teste dele af løsningen og få “beskidte fingre”: Responsibilities: Facilitere testning og verifikation af løsninger inden implementering i virksomheden. Engagere sig i både testledelse og udførelse af testopgaver. Samarbejde med dedikerede teams for CRM-løsningen bygget på Salesforce. Arbejdet tæt sammen med supportteamet og andre afhængige teams for data og integrationsjustering. Must Haves: Erfaring i Test Management og Analyse. Praktisk test erfaring, og gerne i CRM-løsninger. Nice to Haves: Tidligere arbejde i et B2B CRM-projekt. Kendskab til dataintegrationsprocesser. Stærke kommunikationsevner til at justere med tværfunktionelle teams. Other Details: Projekt kontekst: Forbedring af en B2B CRM-løsning i Salesforce specifikt for foodservice-sektoren. Teamstruktur: Samarbejdsvillig miljø med et dedikeret team og supportteams for integration. Driftsfokus: Kræver praktisk test ved siden af projektledelsesansvar. Start: ASAP Varighed: Midt november, men højst sandsynlig med forlængelse der fortsætter ind i 2027 med et nyt projekt. Lokation: Aarhus - hybrid løsning, men nok med forventet 4 dage onsite/uge Omfang: Fuldtid Sprog: Dansk og Engelsk

🏢 Summary: Senior Network Consultant role focused on analyzing, planning, and executing IP address changes to eliminate overlapping IP ranges in preparation for merging large networks. The consultant will manage risk assessment, coordinate stakeholders, and implement changes in production environments with high stability requirements. The assignment runs full-time for 10 months onsite in Midtsjælland starting August 2026. 🗂️ Requirements: Proven experience with restructuring IP address plans and resolving overlapping IP ranges, Strong expertise in subnetting, VLAN and routed networks, Documented experience performing network changes in production environments with minimal downtime, Hands-on experience with DNS and DHCP in large-scale networks, Experience with DDI solutions, specifically InfoBlox, Ability to analyze risk and complexity in critical infrastructure environments, Experience coordinating and leading technical network activities across multiple resources, Background in large, complex and mission-critical environments, Relevant certification such as HPE Aruba Certified Professional or CCNP 📃 Skills: IP, Subnetting, VLAN, Routing, DNS, DHCP, DDI, InfoBlox, HPE, Aruba, Cisco, CCNP 🏢 Description: emagine søger lige nu en Senior Netværkskonsulent til en af vores store offentlige kunder. Som Netværkskonsulent skal du understøtte oprydning i overlappende IP-adresser mhp. en fremtidig sammenlægning af større netværk. Du vil derfor være med til at udarbejde analyse, planlægning og operationel gennemførelse af IP-adresseændringer. Ansvarsområder: Analyse og forberedelse, herunder gennemgang og vurdering af kompleksitet og risiko, med særlig hensyn til kritiske systemer, teknisk udstyr og manuelt konfigurerede enheder Planlægning og koordinering med relevante interessenter Gennemførelse, herinder koordinering og pratisk gennemførelse af IP-adresseændringer Dokumentation og videnoverdragelse Kompetencer: Erfaring med ændring og restrukturering af IP-adresseplaner, håndtering af overlappende IP-ranges, samt subnetting, VLAN og routed netværk Dokumenteret erfaring med netværksændringer i produktionsmiljøer, hvor nedetid har væsentlig driftsmæssig betydning. Praktisk erfaring med: DNS og DHCP i større netværk, samspillet mellem IP-plan, DNS og netværksdrift, anvendelse af DDI-løsning fra InfoBlox. Erfaring med planlægning, koordinering og faglig styring af teknisk netværksarbejde, hvor opgaver er udført af flere tekniske ressourcer. Erfaring fra større og organisatorisk komplekse miljøer (fx offentlige myndigheder, hospitaler, regioner, universiteter eller tilsvarende), hvor netværket understøtter mange systemer og brugere. Erfaring fra netværk, der understøtter sundhedsfaglige, medicotekniske, produktionskritiske eller tilsvarende driftskritiske funktioner. Erfaring fra miljøer med høje krav til stabilitet og lav tolerance for nedetid. Erfaring med enten: HPE Aruba Certified Professional Switching eller Cisco Certified Network Professional - eller tilsvarende. Opstart: 17 august 2026 Varighed: 10 mdr. med mulighed for forlængelse Workload: Fuldtid Lokation: Midtsjælland, onsite

🏢 Summary: Consultant role for leading a Network Services remediation initiative, driving all classic project phases from initiation to closure. The assignment involves managing a complex, cross-functional effort with broad organizational involvement and addressing compliance-related findings. The consultant is expected to combine strong project management capabilities with technical understanding of network and security domains. 🗂️ Requirements: Experience in project management, Experience with network technologies, Experience with firewalls, Experience with complex technical or data-related tasks, Ability to understand and analyze SWIFT findings, Ability to understand and analyze PCI DSS findings, Ability to understand and analyze Clearing findings, Ability to understand and analyze Audit findings, Fluency in Danish 📃 Skills: ProjectManagement, Networking, Firewalls, SWIFT, PCIDSS, Clearing, Audit, DataAnalysis 🏢 Description: emagine søger lige nu en konsulent til Projektledelse af Network Services remediation indsats: PL driver de forskellige faser i initiativet i klassisk projektstil (initiering, eksekvering og afslutning) PL skal håndtere et tværgående og komplekst initiativ, men bred involvering i organisationen PL skal have erfaring erfaring med netværk, firewall og/eller komplekse tech/data-opgaver PL kan sætte sig ind i og forstå de 8 Findings (SWIFT, PCI DSS, Clearing, Audit) PL er dansktalende Periode: Fuld tid - snarest muligt til 30.10.2026 med mulighed for forlængelse Lokation: Roskilde foretrækkes frem for Silkeborg Fysisk fremmøde/remote: Der forventes fleksibilitet og fysisk fremmøde efter behov

🏢 Summary: Experienced Test Manager needed for a large transformation program involving complex integrations between a partner, Danish banks, and a global SaaS solution. The role is responsible for defining and driving the overall test strategy, coordination, and quality assurance across multiple stakeholders and environments. Focus is on structured test governance, risk management, traceability, and scalable test practices in a dependency-heavy setup. 🗂️ Requirements: Extensive experience as Test Manager in large programs with multiple stakeholders and external vendors, Proven experience with integration-heavy systems and complex test environments, Experience in financial infrastructure or regulated environments, Strong experience with Jira and Zephyr or similar test management tools, Experience establishing test strategy, test plans, and risk-based testing, Experience coordinating test activities across teams and suppliers, Ability to manage test data, environments, and defect tracking, Experience with test automation coordination, Fluency in Danish, On-site availability four days per week in Fredericia 📃 Skills: Jira, Zephyr, SaaS, Integration, Testmanagement, Testautomation, Dashboards, Reporting 🏢 Description: Test Manager – komplekst transformationsprogram Vi søger en erfaren Test Manager til et større transformationsprogram med integration mellem vores partner, danske banker og en global 3rd-party SaaS-løsning. Der er et krav om on-site 4 dage om ugen på vores partners lokation i Fredericia. Rollen er en programnær nøgleposition med ansvar for at skabe struktur, fremdrift og kvalitet på tværs af testsporet i et afhængighedstungt setup. Opgaver Etablere og drive samlet teststrategi og testplan på tværs af flere miljøer og parter. Koordinere testaktiviteter mellem interne teams, banker og ekstern leverandør, herunder sikre styring af afhængigheder, testdata, miljøer og defects. Omsætte komplekse forretningsflows og integrationer til robuste testscenarier og risikobaserede testindsatser. Samarbejde tæt med udviklere om testbarhed, fejlfinding og løbende forbedringer, herunder afklaring af acceptkriterier og automatisering hvor relevant. Følge op på leverandørleverancer, commitments og fremdrift i tæt samspil med programledelsen. Understøtte bankernes testspor og bidrage til fælles struktur, forventningsafstemning og praktisk modus operandi. Sikre transparens i status, risici og beslutningspunkter. Drive stakeholder management i testsporet: forventningsafstemme, formidle komplekse problemstillinger klart og levere beslutningsoplæg til programledelse og øvrige nøgleinteressenter. Bidrage til at løfte testdisciplin, sporbarhed og test modenhed i det samlede program. Profil Vi forestiller os en profil der: Har tung erfaring som Test Manager i større programmer med mange interessenter og eksterne leverandører. Trives i krydsfeltet mellem testledelse, stakeholder management og leverandørsamarbejde – og kan kommunikere klart på tværs af forretning, IT og eksterne parter. Kan skabe struktur og momentum i komplekse og delvist uafklarede omgivelser. Gerne har erfaring fra finansiel infrastruktur, integrationstunge løsninger eller regulerede miljøer. (Alternativt pharma, men finansiel bliver foretrukket) Kommunikerer klart og kan balancere samarbejde med nødvendig fasthed over for leverandører. Har solid erfaring med Jira/Zephyr eller tilsvarende værktøjer. Men pragmatisk i brugen. Kan selvstændigt skabe struktur og overblik via fx dashboards og rapporter. Succeskriterier Succes måles ikke kun på en gennemført test, men på at rollen bidrager til: Stabil og troværdig fremdrift i testsporet – med tydelig status og opdateret dokumentation. Tidlig identificering og håndtering af risici og afhængigheder. Velfungerende samarbejde mellem vores partner, banker og leverandør. Velfungerende samarbejde med udviklere. En moden og robust testtilgang, der kan skaleres på tværs af programmet. Konsekvent brug af Jira (fx Jira/Zephyr) til planlægning, eksekvering og opfølgning på test, defects og rapportering – med sporbarhed fra krav til resultater. Fremme testautomatisering, hvor det er muligt og giver forretningsværdi, herunder prioritering af egnede testcases og tæt koordinering med udviklingsteams. Overdragelse af en driftbar teststruktur ved opgavens afslutning. Andre oplysninger: Opstart og varighed: 11.5.2026 - 10.1. 2027 Omfang: Fuldtid Lokation: Fire dage om ugen i Fredericia Sprog: Dansk

🏢 Summary: Seeking an OutSystems developer to work on low-code development projects using the OutSystems platform, including solution design and implementation. The role requires strong OutSystems expertise, database and integration knowledge, and experience with visual drag-and-drop development tools. 🗂️ Requirements: Documented experience with OutSystems, Strong low-code development skills, Ability to work with visual drag-and-drop tools, Solid understanding of databases, Solid understanding of integrations, OutSystems certifications 📃 Skills: OutSystems, Low-code, Databases, Integrations 🏢 Description: Vi søger en OutSystems Udvikler til en af vores kunder. OutSystems kompetencer og certificeringer er essentielle for succes i denne rolle. Primære Ansvarsområder: Forstå og anvende OutSystems platformens funktionaliteter til udviklingsprojekter. Efter behov involvere sig i design og implementering af løsninger. Nøglekrav: Dokumenteret erfaring med OutSystems. Stærke færdigheder i low-code udvikling. Evne til at arbejde med visuelle "træk-og-slip" værktøjer. Solid forståelse for databaser og integrationer. Certificeringer relateret til OutSystems er en fordel. Ønskelige Kvalifikationer: Kendskab til relaterede teknologier og platforme.

🏢 Summary: The offer is for a Middle Penetration Tester responsible for conducting network and application-level security assessments using automated and manual techniques. The role involves identifying and validating vulnerabilities, preparing detailed reports, collaborating with clients, and contributing to internal security tools and processes. The position focuses on strengthening security posture through structured testing methodologies and technical research. 🗂️ Requirements: Minimum 1 year of experience in vulnerability assessments and penetration testing, Minimum 3 years of experience in IT industry, Experience with Linux, Windows, Active Directory, JavaScript, .NET, SQL, Experience applying structured penetration testing methodologies, Understanding of web application vulnerabilities, Ability to document vulnerabilities and remediation steps, Experience with Burp Suite, Nessus, Metasploit, Nmap, sqlmap, Knowledge of programming or scripting for security tools development 📃 Skills: Burp, Nessus, Metasploit, Nmap, sqlmap, Linux, Windows, ActiveDirectory, JavaScript, .NET, SQL, Scripting 🏢 Description: Project overview A security-focused initiative aimed at performing vulnerability assessments and penetration tests for a variety of digital systems. The project supports continuous improvement of security practices and contributes to the development of internal tools and methodologies. The work includes research activities, process enhancement, and collaboration with technical teams to strengthen the overall security posture. Team You will join a security-oriented team that consists of penetration testers, security analysts, and engineers. The team collaborates closely, shares knowledge, and supports research and internal tool development. Position overview We are looking for a Middle Penetration Tester who will be involved in network and application-level security assessments. You will use automated tools and manual techniques to identify and verify security vulnerabilities. This role includes preparing assessment reports, interacting with clients to clarify scope and gather information, and contributing to the improvement of security processes and tools. Technology stack Burp Suite, Nessus, Metasploit, Nmap, sqlmap, Linux, Windows, Active Directory, JavaScript, .NET, SQL, scripting languages Responsibilities Conduct network and application-level security assessments Use automated tools and manual techniques to identify and validate vulnerabilities Prepare clear and comprehensive assessment reports with root cause details and remediation steps Communicate with clients to gather information, clarify scope, and discuss security controls Support internal security competence development through research, tool creation, and process improvement Collaborate with other team members across security and engineering domains Requirements One year of experience performing vulnerability assessments and penetration tests Three years of experience in the IT industry with familiarity across technologies such as Linux, Windows, Active Directory, JavaScript, .NET, SQL Experience applying structured methodology for vulnerability assessments and penetration tests Understanding of web application vulnerabilities Ability to describe and report vulnerabilities along with typical remediation activities Experience with open source and commercial security tools, including Burp Suite, Nessus, Metasploit, Nmap, and sqlmap Knowledge of programming or scripting for creating auxiliary security tools Ability to work effectively with customers and self-manage in challenging situations Nice to have Security certifications, including OSCP, CRTO, CPTS, eWPT, BSCP Strong programming experience in a modern language Experience with mobile application penetration testing Experience with reverse engineering and binary analysis Experience publishing technical content or speaking at industry events Familiarity with security standards, including PCI DSS and ISO 27000