> Markdown version of [/jobs/ext/3516970-senior-security-pentester](https://www.wearedevelopers.com/jobs/ext/3516970-senior-security-pentester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Pentester

- **Company:** Keystone Solutions
- **Location:** Brussel, Belgium
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** JavaScript (Programming Language), Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Advanced Message Queuing Protocol, Automatic Number Plate Recognition, IOS Applications, Apple IOS, Software System Penetration Testing, User Authentication, Microsoft Azure, Bash Shell, Burp Suite, Cloud Computing, Cloud Computing Security, Communications Protocols, Cyber Security, Databases, Continuous Integration, Linux, Domain Name System (DNS), Firmware, White-Box Testing, Hardware Interface Design, Hypertext Transfer Protocols (HTTP), Identity and Access Management, Virtual Private Networks (VPN), Joint Test Action (IEEE Standards), Python (Programming Language), Message Queuing Telemetry Transport (MQTT), Network Architecture, Nmap, OAuth, OpenID, Open Web Application Security, Public Key Infrastructure, Windows PowerShell, Security Assertion Markup Language (SAML), Simple Object Access Protocol (SOAP), Mobile Security, Data Streaming, TCP/IP, Wireshark, Universal Asynchronous Receiver/Transmitter, Web Applications, WebSocket, Wi-Fi Technology, Scripting, Software Security, Backend, RTSP, GWAPT, Kubernetes, Information Technology, Metasploit, Nessus, U-Boot, Grpc, IoT Security
- **Published:** October 2, 2026
- **Apply:** https://www.adzuna.be/details/5907619420

## About the Role

* Present results to technical teams, architects, project managers, and management
 * Ability to mentor less experienced profiles; teamwork and knowledge sharing
 * Preferably bilingual (French, Dutch) or sufficient knowledge of the second national language; excellent understanding of technical English, both written and spoken

Level and Experience:

Authoritative advice and fully independent execution (SFIA level 5 Ensure, advise). Minimum 5+ years of experience in offensive security; capable of leading an assignment independently, from scope definition to presentation of results; explicitly not a junior role.

Degree:

Higher degree in computer science, cybersecurity, electronics, or telecommunications, or equivalent professional experience. Technical certifications in offensive security are a plus (e.g., OSCP/OSCP+, OSWE, OSEP, GPEN/GWAPT, SEC556/PIPA for IoT). No single certification is individually required - the combination of practical experience and domain coverage is decisive.

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal., * Cloud: IAM, virtuele netwerken, opslag, databases, containers/Kubernetes, CI/CD-pipelines (Azure, AW - Level: Confirmed - Most recent: Any time

 * IoT en embedded systemen: IoT-/edge-computingarchitecturen, firmware-analyse, hardware-interfaces, i - Level: Confirmed - Most recent: Any time
 * Methodologien en referentiekaders: OWASP (WSTG, ASVS, API Security Top 10, MASVS/MSTG, IoT Security - Level: Confirmed - Most recent: Any time
 * Netwerken en protocollen: TCP/IP, DNS, HTTP/HTTPS, REST/SOAP/WebSocket/gRPC, MQTT/AMQP/CoAP, RTSP, V - Level: Confirmed - Most recent: Any time
 * Offensieve tooling: Kali/Parrot, Burp Suite/OWASP ZAP, Nmap/Wireshark/Nessus, Metasploit/Impacket, B - Level: Confirmed - Most recent: Any time
 * Scripting en automatisering: Python, PowerShell, Bash en minstens n bijkomende taal (JavaScript, C - Level: Confirmed - Most recent: Any time

## Description

Keystone Solutions is seeking a Senior Security Pentester to join our consultancy mission at a client site. The consultant will work in a complex technical environment focusing on IoT platforms, including ANPR cameras, connected devices, embedded systems, network infrastructure, cloud platforms, APIs, web applications, and central processing systems., The role involves preparing and executing penetration tests across the entire ANPR ecosystem (field equipment, network, cloud, applications, mobile), producing actionable reports, and guiding teams in addressing identified vulnerabilities. These responsibilities will be carried out under Keystone Solutions' consultancy model.

Deliverables:

 * Comprehensive, precise, and reproducible technical reports for each vulnerability (involved systems, exploitation conditions, evidence, impact, risk level, recommendations)
 * Clear executive summary for management
 * Formalized scope, objectives, and rules of engagement for each assignment
 * Developed or customized proof-of-concepts and scripts as needed
 * Retests to validate the effectiveness of corrections
 * Recommendations for improving architectures, security standards, and development procedures

Main Tasks:

 * Analyze technical architectures and data flows; identify critical assets, attack surfaces, and trust relationships
 * Participate in defining the scope, objectives, and rules of engagement for assignments
 * Conduct penetration tests (black box, grey box, white box) on the ANPR ecosystem: cameras, edge devices, gateways, central systems
 * Test IoT and embedded systems for security (firmware, hardware interfaces UART/JTAG/SWD, OTA updates, secure boot)
 * Analyze and test communication protocols (TCP/IP, HTTP/HTTPS, MQTT, RTSP, VPN, Wi-Fi/BLE, TLS/mTLS/PKI, etc.)
 * Perform cloud penetration testing (IAM, virtual networks, storage, containers/Kubernetes, CI/CD pipelines) on Azure, AWS, or GCP
 * Test web applications, APIs, and backend services (authentication, authorization, OWASP Top 10, OAuth 2.0/OIDC/SAML/JWT)
 * Test mobile Android and iOS applications when within scope
 * Conduct penetration tests on Windows, Linux, and Active Directory infrastructure
 * Document and present results to technical teams and management, advising teams on remediation

Core Competencies:

 * Mastery of penetration testing methodologies (black/grey/white box), controlled exploitation, post-exploitation, and lateral movement
 * Expertise in IoT and embedded systems: firmware analysis, hardware interfaces (UART/JTAG/SWD), update mechanisms, and secure boot
 * Network, protocol, and cloud security (Azure/AWS/GCP): IAM, segmentation, containers/Kubernetes, CI/CD
 * Application, API, and mobile security (OWASP, OAuth 2.0/OIDC/SAML/JWT, Android/iOS)
 * Ability to produce technical and executive reports, guide remediation, and mentor less experienced profiles


## Related Videos

- [ The attacker's footprint](https://www.wearedevelopers.com/videos/375-the-attacker-s-footprint)
- [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy)
- [Exploring the Power of gRPC-Gateway for Writing RESTful Services](https://www.wearedevelopers.com/videos/2072-exploring-the-power-of-grpc-gateway-for-writing-restful-services)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Boosting OpenSearch Performance: gRPC Search in Action](https://www.wearedevelopers.com/videos/1964-boosting-opensearch-performance-grpc-search-in-action)
- [Boosting OpenSearch Performance: gRPC Search in Action](https://www.wearedevelopers.com/videos/1935-boosting-opensearch-performance-grpc-search-in-action)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)