Senior Penetration Tester

Penetration Testing Execution: Provide comprehensive web application, IT infrastructure, and application-level testing (including COTS and GOTS software) using defined methodologies .

Vulnerability & Risk Analysis: Assess security vulnerabilities within operating systems, software, protocols, and networks; evaluate risks and formulate actionable mitigation plans .

Stakeholder Alignment: Lead and participate in kick-off meetings to define testing requirements, scope, and rules of engagement .

Reporting & Responsible Disclosure: Write high-quality, structured technical reports in English . Follow the Responsible Disclosure Process for newly detected COTS vulnerabilities with vendors .

Executive Briefings: Brief stakeholders, technical teams, and high-level leadership (up to flag officer level) on security findings and assessment outcomes .

Agile Sprint Delivery: Execute tasks and report outcomes within a 1-week sprint framework, tracking activities inside JIRA .

Education & Experience: Bachelor’s degree in an IT-heavy technical subject with 3 years of post-related experience . Alternatively, 10 years of extensive and progressive penetration testing experience can compensate for a degree .

Core Technical Expertise: Minimum 3 years of deep experience in web application and infrastructure penetration testing, network security architecture design, and UNIX/Windows system administration .

Tooling & Scripting: Strong proficiency with industry-recognized penetration testing tools and scripting skills in at least one language (Python, Go, PowerShell, or Shell) .

Advanced Security Concepts: Solid understanding of authentication protocols, cryptography, application security, malware infection techniques, and defensive technologies .

Desirable Certifications: Professional certifications such as OSCP, OSCE, OSWE, GPEN, CREST Certified Web Application Tester, GXPN, or GWAPT .

Language & Environment: Thorough proficiency in English is required . Prior experience in an international military/civilian environment or knowledge of NATO structures is highly beneficial .

Security Clearance: Must possess a valid, active NATO Secret security clearance .