Penetration Tester

I am hiring a Penetration Tester on behalf of a full-service information security provider offering audit, consulting, training and outsourcing under one roof. They are accredited to perform NIS audits and have expertise in OT/industrial environment security (IACS). Their offerings span from audit and compliance services, to consulting support (preparation and ongoing improvement), as well as training. They emphasise tailored solutions and high assurance.

In this role you will be responsible for:

• Plan and execute penetration tests on networks, web applications, APIs, and infrastructure to identify vulnerabilities and assess system resilience.
• Simulate real-world attack scenarios using advanced tools and custom scripts to test security controls and exploit weaknesses.
• Document and communicate findings in detailed reports, providing practical remediation recommendations to technical and non-technical stakeholders.
• Collaborate with clients and internal teams to improve security posture through follow-up testing, revalidation, and security awareness guidance.
• Research emerging threats, tools, and attack techniques, contributing to the continuous improvement of testing methodologies and internal frameworks.

Essential:

• Relevant degree e.g. Computer Science, Cyber Security etc.

• Proven experience in penetration testing or offensive security, with a solid understanding of network, web, and application-layer vulnerabilities.
• Hands on experience with penetration testing tools and frameworks such as Burp Suite, Nmap, Metasploit, Cobalt Strike, or equivalent.
• Strong knowledge of operating systems, networking, and common security protocols, including TCP/IP, VPN, Active Directory, and web technologies.
• Scripting or development skills (e.g. Python, Bash, PowerShell, or C#) for automation, exploit development, or tool customization.
• Relevant certifications such as OSCP, OSWE, CRTP.
• Strong written and verbal German C1 minimum.

• Modern and easily accessible workplace
• Flexible working - trust based working
• Attractive company pension plan
• Excellent training budget including annual course allowance
• Subsidies for fitness programs and health offers
• Excellent company restaurant
• 30 days of paid vacation plus additional benefits