Security Pentester – IoT & Cloud Security

Pauwels Consulting; Brussel; On-site; EUR 70,000 - 110,000; Full time

Job summary

Pauwels Consulting is seeking a senior security specialist to secure complex IoT platforms. You will identify vulnerabilities across devices, networks, and cloud environments, and produce actionable risk assessments.

The role requires hands-on pentesting of IoT devices, gateways, and edge components, with strong emphasis on IAM, Kubernetes, and CI/CD security across Azure, AWS, and GCP. You will document findings in detailed reports, mentor colleagues, and communicate remediation steps to

Qualifications

• 5+ years of experience in offensive security and penetration testing.
• Expertise in penetration testing methodologies, geolocated exploitation, and lateral movement.
• IoT security knowledge including firmware analysis and hardware interfaces such as UART, JTAG, or SWD.
• Cloud security on Azure, AWS, or GCP, focusing on IAM, Kubernetes, and CI/CD pipelines.
• Web application and API security using OWASP frameworks and protocols like OAuth 2.0, SAML, or JWT.
• Networking protocols including MQTT, RTSP, TLS/mTLS, and PKI.
• Hands-on experience with offensive tools such as Burp Suite, Metasploit, Nmap, and Wireshark.
• Scripting skills in Python, PowerShell, or Bash for security automation.
• Effective communicator capable of mentoring colleagues and presenting results to management.
• Active knowledge of Dutch, French, and English.

Responsibilities

• Analyze technical architectures and data flows to identify critical assets and attack surfaces.
• Perform penetration tests (black, grey, and white box) on IoT devices, edge computing, and gateways.
• Evaluate cloud security posture across Azure, AWS, or GCP, focusing on IAM and containerization.
• Conduct security assessments of web applications, APIs, and mobile platforms following OWASP standards.
• Test firmware, hardware interfaces, and communication protocols for embedded systems.
• Produce detailed technical reports and executive summaries including risk levels and remediation guidance.
• Validate the effectiveness of security fixes through retesting and support technical teams during implementation.

Skills

Penetration testing

IoT security

Cloud security

Kubernetes

CI/CD pipelines

OWASP

OAuth 2.0

SAML

JWT

MQTT

RTSP

TLS/mTLS

PKI

Burp Suite

Metasploit

Nmap

Wireshark

Python

PowerShell

Bash

Dutch

French

English

Mentoring

Tools

Azure

AWS

GCP

Job description

Our client, a major organization in the public safety sector, is looking for a specialist to secure their IoT platform. The role involves identifying and documenting vulnerabilities across a complex ecosystem of connected devices, network infrastructure, and cloud environments to ensure data integrity and availability.

• Analyze technical architectures and data flows to identify critical assets and attack surfaces.
• Perform penetration tests (black, grey, and white box) on IoT devices, edge computing, and gateways.
• Evaluate cloud security posture across platforms like Azure, AWS, or GCP, focusing on IAM and containerization.
• Conduct security assessments of web applications, APIs, and mobile platforms following OWASP standards.
• Test firmware, hardware interfaces, and communication protocols for embedded systems.
• Produce detailed technical reports and executive summaries including risk levels and remediation guidance.
• Validate the effectiveness of security fixes through retesting and support technical teams during implementation.

• 5+ years of experience in offensive security and penetration testing.
• You bring expertise in penetration testing methodologies, geolocated exploitation, and lateral movement.
• You possess deep knowledge of IoT security including firmware analysis and hardware interfaces such as UART, JTAG, or SWD.
• You have experience with cloud security on Azure, AWS, or GCP, specifically with IAM, Kubernetes, and CI/CD pipelines.
• You're proficient in web application and API security using OWASP frameworks and protocols like OAuth 2.0, SAML, or JWT.
• You bring technical mastery of network protocols including MQTT, RTSP, TLS/mTLS, and PKI.
• You have hands-on experience with offensive tools such as Burp Suite, Metasploit, Nmap, and Wireshark.
• You possess scripting skills in Python, PowerShell, or Bash for security automation.
• You're an effective communicator capable of mentoring colleagues and presenting results to management.
• You have an active knowledge of Dutch, French, and English.

Nice to Haves

• Possession of certifications such as OSCP, OSWE, OSEP, GPEN, or SEC556.
• Higher degree in Computer Science, Cybersecurity, or Telecommunications.

• Start date: 01/11/2026
• Duration: 2 months
• Work regime: Full-time
• Location: Brussels
• Working model: Onsite
• Contract: open to both permanent employees and freelancers