> Markdown version of [/jobs/ext/4044468-senior-offensive-security-specialist-web-cloud-infrastructure](https://www.wearedevelopers.com/jobs/ext/4044468-senior-offensive-security-specialist-web-cloud-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Offensive Security Specialist (Web, Cloud & Infrastructure) - **Company:** Bureau Veritas - **Location:** ROTTERDAM, Netherlands - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Private Networks, Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, User Authentication, Microsoft Azure, Bash Shell, Burp Suite, Software as a Service, Cloud Computing, Cloud Computing Security, Identity and Access Management, Python (Programming Language), Linux System Administration, Network Protocols, Nmap, Windows PowerShell, Web Application Security, Web Applications, Scripting, Cloud Platform System, Backend, Vulnerability Analysis - **Published:** October 16, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=8a0ae6d70cc79d6c ## About the Role * Several years of experience in offensive security, penetration testing, or red teaming. * Experience with web application, API, and infrastructure testing. * Knowledge of Azure, AWS, and/or other cloud platforms. * Experience with Active Directory, Windows, and Linux environments. * Knowledge of network protocols, authentication, and authorization mechanisms. * Experience with tools such as Burp Suite, BloodHound, Impacket, Nmap, NXC, and similar security tools. * Experience with scripting in languages such as Python, PowerShell, or Bash. * Excellent communication skills in Dutch and English. * CPTS, OSCP, OSEP, CRTO, CRTP, OSWE, CARTE, or comparable certifications. * Proficiency in Dutch and English. ## Description While penetration testers sometimes specialize in a single domain, this role gives you a broad skill set and the opportunity to connect multiple attack vectors. You'll not only investigate vulnerabilities in web applications but also examine how these can lead to access to cloud environments, Active Directory environments, internal networks, and business-critical systems. Conversely, you might start in an internal network and manage to escalate your privileges to the point where you can also gain access to the crown jewels in SaaS applications. The challenge lies in the combination of breadth and depth. You constantly switch between web applications, cloud platforms, and internal infrastructures, as well as the communication between them. You don't just discover isolated vulnerabilities in a single component; you investigate how an attacker could combine them to penetrate deep into an organization. In doing so, you'll constantly encounter new technologies, architectures, and attack techniques. Your knowledge and creativity make the difference between a standard security assessment with a few findings and an assessment that connects those findings to vulnerabilities in the underlying infrastructure and reveals the true impact. In this way, you actually help organizations reduce their risks. What will you be performing? * Conduct advanced web application, cloud, and infrastructure assessments. * Testing modern web applications, APIs, and cloud-native environments. * Identifying vulnerabilities within Azure, AWS, and hybrid infrastructures. * Conducting internal penetration tests on networks and investigating Active Directory and corporate environments. * Investigating privilege escalation and lateral movement scenarios. * Simulating realistic attack paths from both external and internal perspectives. * Assessing cloud configurations, identity management, and access models. * Advising clients on security measures and risk mitigation. * Drafting and presenting technical reports and executive summaries. * Coaching and mentoring less experienced offensive security specialists. Who are you? You are an experienced offensive security professional who looks beyond individual vulnerabilities. You understand how modern IT landscapes are structured and are able to provide insight into complex attack paths., As a Senior Offensive Security Specialist, you'll work on challenging projects as part of a team of experts who share your passion for cybersecurity. You'll share knowledge with your experienced colleagues, perform research together, and challenge each other technically. We believe that the best specialists never stop growing. That's why we invest in training, certifications, attending conferences, and research. With us, you'll find yourself in an environment where the level of expertise is demonstrably high. Our specialists not only tackle complex security challenges but are also deployed to conduct investigations and assessments of systems and organizations of national importance. For example, our experts conducted source code and security investigations for the DigiD backend on behalf of Logius (https://www.tweedekamer.nl/downloads/document?id=2024D18965). In addition, our researchers were involved in security reviews of the Dutch CoronaMelder app (https://www.pentestreports.com/reports/secura/Coronamelder-REPORT-v1.0). Security assessments are also being conducted for systems operated by the Electoral Council (https://www.kiesraad.nl/site/binaries/site-content/collections/documents/2025/09/15/technical-security-assessment-transfer-platform/Kiesraad-Transfer-Platform-REPORT-v0.5.pdf). And there are many more exciting and impactful projects that we, of course, can't tell you about just yet. What sets us apart is that we don't just claim our expertise-we have it independently verified. Quality, specialization, and thought leadership are deeply embedded in our organization. We actively share our knowledge within the cybersecurity community, publish research, and contribute to the development of standards within the field. This is also reflected in our accreditations. For example, we were the first cybersecurity company in the Netherlands to receive the CCV Penetration Testing certification, and to this day we remain involved in the ongoing development of this certification. For professionals who want to surround themselves with the best specialists, work on socially relevant projects, and continuously deepen their expertise, we offer an environment where you can truly make a difference. We actively strive to create a safe, inclusive, and positive work environment. Our values guide how we collaborate, provide feedback, and evaluate performance. We support well-being and team cohesion through team activities, access to OpenUp.com, and by promoting a healthy work-life balance with flexible work options.