> Markdown version of [/jobs/ext/2638-senior-pentester-red-teamer](https://www.wearedevelopers.com/jobs/ext/2638-senior-pentester-red-teamer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Pentester / Red Teamer - **Company:** ecosio GmbH - **Location:** Austria (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Amazon S3, Software System Penetration Testing, Bash Shell, Cloud Engineering, Continuous Integration, Linux, DevOps, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Machine Learning, Open Source Technology, Open Web Application Security, Red Team (Cyber Security), Reverse Engineering, Web Applications, Cloud Platform System, Large Language Models, Mitre Att&ck, Malware, Cyber Threat Analysis, Amazon Virtual Private Cloud (VPC), Computer Equipment, Kubernetes, Metasploit, Purple Team (Cyber Security), Serverless Computing, Golang - **Published:** May 14, 2026 - **Apply:** https://at.indeed.com/viewjob?jk=8e880e6aee439bf1 ## About the Role To connect with ecosio it is important to have… * 5+ years of hands-on experience in penetration testing, red teaming, or offensive security roles in Cloud environments * Proven track record of security assessments in AWS environments (IAM misconfigurations, privilege escalation, serverless exploitation, container breakouts) * Deep understanding of OWASP Top 10, MITRE ATT&CK, and common exploit frameworks (Metasploit, Cobalt Strike, Sliver, etc.) * Strong proficiency in scripting and automation (Python, Bash, Go, or similar) * Strong proficiency in subject matter tools e.g. Pacu or Prowler * Solid knowledge of networking, operating systems (Linux/Windows), and cloud-native architectures * Familiarity with AI/ML-assisted offensive security tools and techniques * Excellent analytical thinking and ability to work independently with minimal supervision * Strong written and verbal communication skills for technical and executive reporting And nice to have... * Relevant certifications such as OSCP, OSEP, OSCE, CRTO, GPEN, GXPN, or AWS Security Specialty * Experience with Kubernetes / EKS security assessments and container escape techniques * Experience in physical pentesting of hardware devices such as firewalls, wifi aps and contactless card readers * Background in malware analysis, reverse engineering, or exploit development * Hands-on experience with AI-powered pentesting frameworks (e.g., PentestGPT, Nuclei AI, custom LLM agents for recon/exploitation) * Contributions to open-source security tools or published security research / CVEs * Experience with threat intelligence platforms and adversary emulation frameworks * Familiarity with compliance frameworks relevant to offensive testing (ISO 27001, NIS2, SOC 2) ## Description As a Senior Pentester / Red Teamer, you will operate as a highly autonomous security specialist responsible for proactively identifying vulnerabilities, simulating real-world attack scenarios, and hardening our infrastructure and applications. You will design and execute offensive security engagements - including penetration tests, red team exercises, and threat hunting campaigns - across cloud-native and hybrid environments. A core part of your mandate is to build and maintain automated security testing pipelines, leveraging AI-assisted tooling to continuously assess and improve the organisation's security posture. You'll connect with the role if you enjoy... * Plan and execute penetration tests against internal and external infrastructure, web applications, APIs, and cloud environments (primarily AWS) * Conduct red team engagements simulating advanced persistent threats (APTs) and real-world attack chains * Design, build, and maintain automated pentesting and security scanning pipelines integrated into CI/CD workflows * Leverage AI and machine-learning-based tools (e.g., LLM-assisted vulnerability discovery, automated exploit generation, AI-driven anomaly detection) to scale offensive security operations * Develop custom exploit code, scripts, and tooling tailored to the organisation's technology stack * Assess and harden Kubernetes and AWS environments (IAM, VPC, EKS, Lambda, S3, CloudTrail, GuardDuty, etc.) * Document findings in clear, actionable reports with risk ratings and remediation guidance * Collaborate with SOC, DevOps, and engineering teams to validate fixes and improve detection capabilities * Contribute to purple team exercises bridging offensive findings with defensive improvements * Stay current on emerging attack techniques, CVEs, threat intelligence, and offensive security research Mentor junior security team members on offensive methodologies and tooling ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)