[6113A] Penetration Tester x2

GardPass Consulting & Space; Henegouwen; On-site; EUR 60,000 - 90,000; Full time

Job summary

GardPass Consulting & Space seeks experienced cybersecurity professionals in Mons, Belgium, for hands-on web and infrastructure penetration testing, security assessments, and NATO-compliant design reviews. You will lead testing efforts, generate executive-ready reports, and advise on remediation strategies.

The role requires extensive expertise in penetration testing, vulnerability assessment, and security product evaluation, with strong scripting skills and risk mitigation capabilities.

Qualifications

• More than 3 years in web application pentesting.
• More than 3 years in IT infrastructure pentesting.
• More than 3 years in network security design and assessment.
• Experience evaluating vulnerabilities in OS, software, protocols and networks.
• Experience researching and evaluating security products and technologies.
• Unix/Windows administration experience.
• Proficient with penetration testing tools and methodologies.
• Scripting skills in Perl, Python, Ruby or shell.

Responsibilities

• Lead/participate in Red/Blue Team activities during NATO exercises.
• Perform Web, infrastructure and application penetration testing.
• Conduct security design reviews to ensure NATO policy compliance.
• Provide security consultancy to projects and plans.
• Coordinate with NCIA boards and NATO authorities for accreditation.
• Present security findings to executive and technical audiences.
• Collaborate with Penetration Testing Cell head to ensure proactive security.

Skills

Penetration testing

IT infrastructure pentesting

Network security architecture

Vulnerability assessment

Security product evaluation

UNIX system administration

Windows system administration

Pen testing methodologies

Scripting (Perl, Python, Ruby, Bash)

Security concepts and cryptography

Risk assessment & mitigation

Technical reporting

Job description

• Extensive knowledge and experience (more than 3 years) in web application penetration testing;
• Extensive knowledge and experience (more than 3 years) in IT infrastructure penetration testing;
• Extensive knowledge and experience (more than 3 years) in network security architecture design;
• Extensive knowledge and experience (more than 3 years) in assessing security vulnerabilities within OS, software, protocols & networks;
• Extensive knowledge and experience (more than 3 years) in researching and evaluating security products & technologies;
• Knowledge in system and network administration of UNIX and Windows systems;
• Extensive knowledge and experience (more than 3 years) in the use of penetration testing tools, techniques, and recognized testing methodologies;
• Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);
• Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies.
• Ability to evaluate risks and formulate mitigation plans;
• Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences.

Start date: asap

Clearance: NATO Secret or equivalent

Location: Mons, Belgium

Skill, Knowledge & Experience:

• Extensive knowledge and experience (more than 3 years) in web application penetration testing;
• Extensive knowledge and experience (more than 3 years) in IT infrastructure penetration testing;
• Extensive knowledge and experience (more than 3 years) in network security architecture design;
• Extensive knowledge and experience (more than 3 years) in assessing security vulnerabilities within OS, software, protocols & networks;
• Extensive knowledge and experience (more than 3 years) in researching and evaluating security products & technologies;
• Knowledge in system and network administration of UNIX and Windows systems;
• Extensive knowledge and experience (more than 3 years) in the use of penetration testing tools, techniques, and recognized testing methodologies;
• Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);
• Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies.
• Ability to evaluate risks and formulate mitigation plans;
• Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences.

Duties & Role:

• Lead and/or be part of the Red/Blue Team during NATO military exercises;
• Provide Web, infrastructure and application level penetration testing;
• Provide security design reviews to ensure compliance with NATO policies and directives;
• Provide security consultancy and advice to projects, plans, and other entities;
• Build and sustain effective communications with different stakeholders; specifically, the NCIA Configuration Control Board, Security Accreditation Boards, NATO Security Accreditation Authorities, and NCI Agency organization units supporting accreditation processes.
• Brief at both executive and technical levels on security reports and testing outcome, including at flag officer level;
• In co-ordination with the Head of the Penetration testing Cell, ensure proactive