Penetration Tester

Description

The company runs and reworks mission-critical technology systems for large businesses, combining proven expertise with AI-driven insight.

You will join as a Penetration Testing Associate and manage the full lifecycle of customer engagements.

The team offers a flexible, supportive environment that prioritizes well-being and room for growth.

Responsibilities

• Authorized to simulate attacks on computer systems, networks, applications and other digital assets.
• Find vulnerabilities and hidden weaknesses, and help strengthen customers' security.
• Study each customer's security environment and carry out thorough assessments to find problem areas.
• Write tailored proposals that fit the company's security strategy and present them to customers.
• Work with other teams to share findings and recommended countermeasures against digital threats.
• Document your testing methods, findings and recommendations in detailed reports for stakeholders.
• Keep learning new methodologies, threats, attack techniques and tools.
• Lead the penetration testing initiatives across projects over time.

Requirements

• Strong ethical hacking skills, including hands-on penetration testing and vulnerability assessments.
• Proficiency in programming languages and penetration testing tools.
• Deep understanding of information security concepts, vulnerabilities and attack vectors.
• Familiarity with security frameworks and standards.
• Ability to analyze complex systems, identify weaknesses and propose fixes.
• 2+ years of experience in more than one GRC area: enterprise risk management, internal audit, regulatory compliance, policy management or third party risk management.
• Working knowledge of common audit and compliance tools.
• Experience turning business requirements into control objectives, designing security controls and implementing them within a security management cycle.
• Solid knowledge of security standards and best practices, such as ISO27001 and NIST.
• Experience advising clients on regulatory requirements, for example HIPAA, PCI DSS, FBA, GDPR or DORA.
• Experience running GRC maturity assessments.
• Experience coordinating SOC 2 and/or ISO 27001 audits.
• Preferred: familiarity with cloud computing platforms and their security considerations.
• Preferred: certifications such as LPT, Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), Certified Information Systems Security Professional (CISSP) or GXPN.
• Preferred: valid, current certification in CRISC, CGEIT, CERA, CISM, CISA or CISSP.
• Preferred: statistical analysis and modeling skills.
• Preferred: basic skills in networks, compute and cloud computing.
• Preferred: daily use of Microsoft Office 365 and productivity tools such as Excel, Word, PowerPoint and SharePoint for audit and compliance work.
• Preferred: project management experience and the ability to run security initiatives or projects.
• A growth mindset and a drive to develop your own skills.
• A customer-focused approach that puts customer success first.
• An open, inclusive way of working with others.
• Apply even if you do not meet every requirement.

Conditions

Hybrid-friendly work model.

The company welcomes people of all backgrounds and does not require a perfect match to apply.

The company is an equal opportunity employer.

Benefits

• Be Well programs supporting financial, mental, physical and social health.
• Career path tools, personal development goals aligned with your ambitions and regular feedback.
• Learning opportunities, including certifications with Microsoft, Google and Amazon, coaching and hands-on experience.
• Early work on meaningful projects that build your skills from day one.