Penetration Tester

This is a fully remote position, open to applicants in Germany.

📋 Description

• Execute traditional penetration testing on IT infrastructures, web applications, and web services.

• Perform security evaluations of Active Directory / Entra ID, cloud platforms (Azure, AWS), and mobile applications for iOS and Android.

• Assess and analyze AI-driven applications, LLM integrations, and AI workflows as part of AI penetration testing to uncover vulnerabilities, misconfigurations, and potential misuse scenarios.

• Assist the team with challenging and intricate projects.

• Contribute to the creation of methodologies and solution strategies.

• Propose ideas and expertise to enhance processes and security assessments continuously.

• Provide advice and support to clients regarding IT security.

⛳️ Requirements

• Initial professional experience in penetration testing or verifiable practical experience (e.g., CTFs, personal labs, bug bounty initiatives, or relevant certifications).

• Familiarity with network infrastructures, web applications, or web services.

• Knowledge of Active Directory, Entra ID, cloud environments, mobile applications, or rich clients is advantageous.

• Proficiency in programming languages or experience with scripting languages.

• Certifications such as PJPT, CRTP, CARTP, OSCP, OSWP, or equivalent qualifications, along with successful participation in CTF competitions are preferred.

• A motivated, creative, and solution-focused team player.

• Strong communication skills in both German and English.

• Willingness to travel as necessary.

🏝️ Benefits

• Option for remote/mobile work.

• Flexible working hours emphasizing a healthy work-life balance.

• Freedom for innovative work.

• Opportunities for personal development.

• Attractive training and continuing education options, including team-based programs.

• Numerous employee benefits (Corporate Benefits).

• Attractive employee referral program.

• Modern IT equipment, such as company laptops, headsets, second monitors, and smartphones.

• Informal, first-name culture.

• Regular team events, both large and small.

• Structured onboarding and comprehensive training.