渗透测试工程师

该职位来源于猎聘 Global Business Services is a Bosch service unit providing end 2 end process services to Bosch internal organization. GS/TE the tecnical enabling team of GS, we’re the engine of GS digital transformation by implementing smart automation, UX design, data analytics, digital initiatives, IT application goverancne and IT portfolio, investment management. GS/TET-APAC is the regional organization of GE/TE. With competences and capacities located in the APAC, we work together with our business partners to escort, capture, conceptualize, implement and operation digital initiatives in order to capitalize the power of digital innovation. We drive and lead the GS regional cross functional digital initiative incubation, project implementation, platform rollout and design of digital business models Major responsibilities:

• Conduct penetration testing on web systems, cloud services, and IoT solutions to identify vulnerabilities using ethical hacking techniques.
• Assess risks associated with identified vulnerabilities and compile comprehensive penetration test reports.
• Present findings to stakeholders and technical teams, explaining testing methodologies, procedures, and vulnerability severity from a technical perspective.
• Analyze software vulnerabilities and design protective measures to mitigate cybersecurity risks.
• Research and evaluate emerging security trends and industry best practices. Preferred Background & Skills:
• Education: BS in Computer Science, Computer Engineering, Information Security, or equivalent practical experience.
• Penetration Testing Expertise: Strong understanding of penetration testing methodologies and hands-on experience in one or more areas: web applications, mobile applications, or cloud services. More than 2 years of experience in penetration testing, familiar with the steps, methods and processes of penetration testing, with strong penetration testing and vulnerability mining capabilities.
• Security Expertise: Proficiency in web vulnerability exploitation, reverse engineering, and exploit development.
• Tools & Technologies: Familiarity with common penetration testing tools (e.g., Kali Linux, Burp Suite).
• Communication Skills: Strong written and verbal English proficiency.
• Certifications (Preferred): OSCP or equivalent security certifications