Senior Security Pentester

We're looking for a Senior Security Pentester to lead authorised penetration testing across connected cameras, sensors, embedded devices, networks, cloud platforms and applications. The work combines firmware and hardware analysis with IoT security, cloud security, API and mobile testing.

What you'll do

• Define test scope, objectives and rules of engagement.
• Analyse architectures, data flows, assets and attack surfaces.
• Test connected cameras, edge devices, gateways and central systems.
• Assess cloud environments, networks, firmware, hardware interfaces and protocols.
• Test web applications, APIs, mobile apps and Windows/Linux/Active Directory systems.
• Document findings, advise on fixes and retest vulnerabilities.

What you bring

• At least five years in offensive security, leading tests from scoping through reporting.
• Black-, grey- and white-box testing, controlled exploitation, post-exploitation and lateral movement.
• IoT and embedded security, including firmware analysis, UART/JTAG/SWD, OTA updates and secure boot.
• Azure, AWS or GCP security, including IAM, virtual networks, storage, databases, Kubernetes and CI/CD.
• TCP/IP, DNS, HTTP/HTTPS, REST/SOAP, MQTT, RTSP, Wi-Fi/BLE and TLS.
• Web, API and mobile security, OWASP, OAuth 2.0, OIDC, SAML and JWT.
• Kali/Parrot, Burp Suite/OWASP ZAP, Nmap, Wireshark, Nessus, Metasploit or Impacket.
• Python, PowerShell, Bash and at least one additional programming language.
• French B2, Dutch B2 and English B2.
• Higher education in computer science, cybersecurity, electronics or telecommunications, or equivalent professional experience.
• Able to present findings, guide remediation and mentor less experienced testers.

Nice to have

• Offensive security certifications such as OSCP/OSCP+, OSWE, OSEP, GPEN/GWAPT or SEC556/PIPA.