WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Back

Medior Security Pentester

Keystone Solutions
Brussel, Belgium
about 1 month ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Temporary contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Working hours
Regular working hours
Languages
Dutch, English, French
Job source
www.indeed.com

Tech stack

Microsoft Windows Active Directory Application Programming Interfaces (APIs) Software System Penetration Testing Burp Suite Code Review Continuous Integration Dynamic Host Configuration Protocol Domain Name System (DNS) White-Box Testing Hypertext Transfer Protocols (HTTP) Virtual Private Networks (VPN)
+18 more
Kerberos (Protocol) Lightweight Directory Access Protocols (LDAP) Nmap NT LAN Manager OAuth OpenID Open Web Application Security Windows PowerShell Security Assertion Markup Language (SAML) Simple Network Management Protocols TCP/IP Wireshark Web Applications Cross-Site Scripting (XSS) Information Technology Metasploit Nessus Api Management

Job description

  • Prepare and conduct penetration tests on web applications, networks, and Windows/Active Directory environments, producing technical reports and contributing to remediation efforts with senior support on complex missions.
  • Deliver comprehensive, precise, and reproducible technical reports by vulnerability (affected systems, exploitation conditions, evidence, impact, risk, recommendations).
  • Contribute to executive summaries for management, reviewed by a senior.
  • Define the scope, objectives, and engagement rules of missions in collaboration with a senior.
  • Provide simple proof of concepts and scripts tailored to needs.
  • Conduct retests to validate the effectiveness of corrections.
  • Contribute to internal capitalization: methodologies, checklists, report templates, tooling., * Web application and API testing: OWASP Top 10, modern authentication/authorization (OAuth 2.0/OIDC/SAML/JWT), targeted code review.
  • Network and infrastructure testing: protocols (TCP/IP, DNS, HTTP/HTTPS/TLS, SMB/LDAP/Kerberos/RDP), segmentation, filtering.
  • Windows/Active Directory testing: domain enumeration, Kerberos/NTLM, GPO/ACL, lateral movement, PowerShell.
  • Technical report writing and ability to escalate/collaborate with a senior., As a consultant at Keystone Solutions, you will engage in dynamic projects that offer a variety of challenges across different client environments. Our commitment to turbo-charged learning ensures that you will have broad professional development opportunities, and we are dedicated to supporting your career growth within our framework. Being a ‘K-Stone’ means bringing our core values to every engagement.

Requirements

  • Structured penetration testing methodology (black/grey/white box); controlled exploitation and post-exploitation., * Ability to seek support and escalate at the right time; teamwork and knowledge sharing.
  • Bilingual preferred (French, Dutch) or sufficient knowledge of the second national language; excellent understanding of technical English., * Minimum 3 years of experience (ideally 3 to 5 years); independently conducts standard missions and contributes to complex missions under senior coordination.
  • Higher education degree in computer science, cybersecurity, or telecommunications, or equivalent professional experience.
  • Preferred certifications: OSCP/OSCP+, Burp Suite Certified Practitioner (BSCP), CRTP; no certification is required., * Applications web et API : injections, IDOR, XSS, SSRF, désérialisation, gestion de sessions/tokens, - Level: Junior - Most recent: Any time
  • Méthodologies et référentiels : OWASP WSTG/ASVS/API Security Top 10, PTES, MITRE ATT&CK, CVSS, CWE/C - Level: Junior - Most recent: Any time
  • Notions complémentaires (atout) : cloud (Azure/AWS/GCP), Linux, conteneurs/Kubernetes/CI-CD, applica - Level: Junior - Most recent: Any time
  • Outillage : Kali/Parrot, Burp Suite/OWASP ZAP, Nmap/Wireshark/Nessus, Metasploit/Impacket/NetExec, B - Level: Junior - Most recent: Any time
  • Réseaux et protocoles : TCP/IP, DNS/DHCP/NTP/SNMP, HTTP/HTTPS/TLS, SMB/LDAP/Kerberos/RDP/WinRM, VPN - Level: Junior - Most recent: Any time
  • Windows et Active Directory : objets AD, GPO, ACL, relations d’approbation, Kerberos/NTLM (Kerberoas - Level: Junior - Most recent: Any time

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Loading talks and stories from around this role…