> Markdown version of [/jobs/ext/4061324-medior-security-pentester](https://www.wearedevelopers.com/jobs/ext/4061324-medior-security-pentester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Medior Security Pentester - **Company:** Keystone Solutions - **Location:** Brussel, Belgium - **Experience:** Experienced - **Contract:** Temporary contract - **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Software System Penetration Testing, Burp Suite, Code Review, Continuous Integration, Dynamic Host Configuration Protocol, Domain Name System (DNS), White-Box Testing, Hypertext Transfer Protocols (HTTP), Virtual Private Networks (VPN), Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Nmap, NT LAN Manager, OAuth, OpenID, Open Web Application Security, Windows PowerShell, Security Assertion Markup Language (SAML), Simple Network Management Protocols, TCP/IP, Wireshark, Web Applications, Cross-Site Scripting (XSS), Information Technology, Metasploit, Nessus, Api Management - **Published:** October 1, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=81a6326bb25c0409 ## About the Role * Structured penetration testing methodology (black/grey/white box); controlled exploitation and post-exploitation., * Ability to seek support and escalate at the right time; teamwork and knowledge sharing. * Bilingual preferred (French, Dutch) or sufficient knowledge of the second national language; excellent understanding of technical English., * Minimum 3 years of experience (ideally 3 to 5 years); independently conducts standard missions and contributes to complex missions under senior coordination. * Higher education degree in computer science, cybersecurity, or telecommunications, or equivalent professional experience. * Preferred certifications: OSCP/OSCP+, Burp Suite Certified Practitioner (BSCP), CRTP; no certification is required., * Applications web et API : injections, IDOR, XSS, SSRF, désérialisation, gestion de sessions/tokens, - Level: Junior - Most recent: Any time * Méthodologies et référentiels : OWASP WSTG/ASVS/API Security Top 10, PTES, MITRE ATT&CK, CVSS, CWE/C - Level: Junior - Most recent: Any time * Notions complémentaires (atout) : cloud (Azure/AWS/GCP), Linux, conteneurs/Kubernetes/CI-CD, applica - Level: Junior - Most recent: Any time * Outillage : Kali/Parrot, Burp Suite/OWASP ZAP, Nmap/Wireshark/Nessus, Metasploit/Impacket/NetExec, B - Level: Junior - Most recent: Any time * Réseaux et protocoles : TCP/IP, DNS/DHCP/NTP/SNMP, HTTP/HTTPS/TLS, SMB/LDAP/Kerberos/RDP/WinRM, VPN - Level: Junior - Most recent: Any time * Windows et Active Directory : objets AD, GPO, ACL, relations d'approbation, Kerberos/NTLM (Kerberoas - Level: Junior - Most recent: Any time ## Description * Prepare and conduct penetration tests on web applications, networks, and Windows/Active Directory environments, producing technical reports and contributing to remediation efforts with senior support on complex missions. * Deliver comprehensive, precise, and reproducible technical reports by vulnerability (affected systems, exploitation conditions, evidence, impact, risk, recommendations). * Contribute to executive summaries for management, reviewed by a senior. * Define the scope, objectives, and engagement rules of missions in collaboration with a senior. * Provide simple proof of concepts and scripts tailored to needs. * Conduct retests to validate the effectiveness of corrections. * Contribute to internal capitalization: methodologies, checklists, report templates, tooling., * Web application and API testing: OWASP Top 10, modern authentication/authorization (OAuth 2.0/OIDC/SAML/JWT), targeted code review. * Network and infrastructure testing: protocols (TCP/IP, DNS, HTTP/HTTPS/TLS, SMB/LDAP/Kerberos/RDP), segmentation, filtering. * Windows/Active Directory testing: domain enumeration, Kerberos/NTLM, GPO/ACL, lateral movement, PowerShell. * Technical report writing and ability to escalate/collaborate with a senior., As a consultant at Keystone Solutions, you will engage in dynamic projects that offer a variety of challenges across different client environments. Our commitment to turbo-charged learning ensures that you will have broad professional development opportunities, and we are dedicated to supporting your career growth within our framework. Being a 'K-Stone' means bringing our core values to every engagement.