Cybersecurity Pentester - Senior Consultant/Manager (f/m/d)

Tasks

• You will conduct penetration testing of web applications, APIs and microservices architectures aligned with standards such as from OWASP
• You will perform advanced security assessments of cloud environments (AWS, Azure, GCP), hybrid and on-prem infrastructure
• You will perform security validation of Infrastructure as Code (IaC) implementations, identifying misconfigurations and compliance gaps
• You will conduct mobile application security assessments for Android and iOS platforms
• You will author detailed technical reports documenting vulnerabilities, risk analysis, and remediation recommendations
• You will present findings to stakeholders and technical teams
• You will mentor colleagues and contribute to team skill development
• You will handle the development of testing methodologies and processes through automation and innovation

Qualifications

• Proven track record in web application security testing with Burp Suite proficiency
• Good understanding of IT architectures and security concepts
• Security assessment and testing certifications (e.g.: OSCP, OSWE, WAPTX) or cloud security certs
• Experience with Infrastructure as Code (Terraform, Ansible)
• Experience writing clear, actionable reports
• Demonstrated experience in cloud security for at least one major platform (AWS/Azure/GCP)

Things to know before departure:

• Start: by arrangement - always on the 1st and 15th of the month
• Working hours: full-time ( 40h); 27 vacation days
• Employment contract: Unlimited
• Line of work: Consulting
• Language skills: Fluency in written and spoken English; German would be a plus
• Flexibility & willingness to travel
• Other: a valid work permit