Penetration Tester

ROLE

The Penetration Tester role will be in charge of delivering penetration to improve the software and infrastructure security of the CMA CGM Group. Reporting to the Group Head of Application Security, this role will be a deep technical security expert, able to validate the proper security implementation of CMA CGM Group assets. A proven experience in red team assessments and infrastructure penetration tests is required.

RESPONSIBILITIES

• Deliver all kinds of applications penetration tests: Web applications, APIs, mobile applications, thick client applications
• Deliver infrastructure penetration tests: Active Directory, Wi-Fi, networks, etc.
• Ability to identify full compromission path and kill-chain
• Compromise modern infrastructures (containerized, microservices) and cloud platforms (AWS, GCP, Azure)
• Advanced knowledge of attack vectors and exploit techniques, including zero-day vulnerabilities
• Provide technical expertise and understanding to other services (ex. SOC, Forensic)
• Provide recommendations / mitigations to remediate or mitigate vulnerabilities
• Coordinate with various IT and business teams to prepare and organize penetration tests

QUALIFICATIONS & PROFILE

Education:

• Bachelor or Master degree in Computer Science, Information Technology or relevant degree
• OSCP, OSWE, OSCE or any other relevant certification

Knowledge & Experience:

• 5+ years of experience in penetration testing
• Proven experience with infrastructure penetration tests and red team assessments
• Excellent knowledge of OWASP Top10, CWE…
• Excellent understanding of micro-services architectures & APIs
• Proven penetration tester experience
• Use of various tools such as Burp Suite, Zap, Kali distribution…
• Network skills (routing, encapsulation, VPN, firewalling, DNS…)

Other:

• The ability to interact with CMA CGM colleagues, build good relationships at all levels and across all business units and organisations, and the ability of influence stakeholders of all levels
• Excellent verbal, written and interpersonal communication skills. Listens and communicates technical subjects to both technical and nontechnical audiences, flexes style to suit the needs of the audience.
• Ability to work with others effectively, with 3rd parties, internal teams, and international business units, promoting knowledge sharing within and across teams
• Highly self-motivated and directed, with keen attention to detail
• Ability to properly manage time and priorities
• Rigor and quality
• Customer-oriented approach
• Fluent English mandatory, French optional