Security Pentester – Web Apps & Active Directory

Editx; Brussel; On-site; EUR 55,000 - 85,000; Full time

Job summary

Editx in Brussels is seeking a security professional to perform comprehensive penetration testing across web apps, APIs, and administration portals, plus network infrastructure assessments.

You will assess Windows/Active Directory environments, analyze data flows, document vulnerabilities with reproducible steps, and present findings to technical teams to support risk management and remediation efforts. You will contribute to internal knowledge sharing and tooling improvements.

Responsibilities

• Perform penetration tests in black, grey, and white box modes on web applications, APIs, and administration portals.
• Conduct internal and external network infrastructure assessments focusing on segmentation, filtering, and protocol vulnerabilities.
• Execute security tests on Windows and Active Directory environments, including Kerberos, GPO, ACL, and lateral movement analysis.
• Analyze technical architectures and data flows to identify attack surfaces and critical assets.
• Document vulnerabilities and draft technical reports with detailed reproduction steps and remediation recommendations.
• Present findings to technical teams and project managers to assist in risk management.
• Contribute to internal knowledge sharing, including methodologies, check-lists, and tooling improvements.

Job description

Responsibilities

• Perform penetration tests in black, grey, and white box modes on web applications, APIs, and administration portals.
• Conduct internal and external network infrastructure assessments focusing on segmentation, filtering, and protocol vulnerabilities.
• Execute security tests on Windows and Active Directory environments, including Kerberos, GPO, ACL, and lateral movement analysis.
• Analyze technical architectures and data flows to identify attack surfaces and critical assets.
• Document vulnerabilities and draft technical reports with detailed reproduction steps and remediation recommendations.
• Present findings to technical teams and project managers to assist in risk management.
• Contribute to internal knowledge sharing, including methodologies, check-lists, and tooling improvements.