Senior Penetration Tester

Aegis Vision; Henegouwen; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Aegis Vision is seeking a seasoned penetration tester to conduct comprehensive testing of web applications, IT infrastructure, and application-level security using defined methodologies. You will assess vulnerabilities across OS, software, protocols, and networks, delivering actionable mitigations and clear risk analyses.

You will participate in kickoff meetings to shape scope and rules of engagement, produce high-quality English reports, and present findings to stakeholders up to leadership

Qualifications

• Bachelor’s degree in an IT-heavy subject with 3 years of post-related experience.
• Alternative: 10 years of extensive penetration testing experience can compensate for a degree.
• Deep experience in web application and infrastructure penetration testing.
• Experience with UNIX/Windows system administration.
• Proficiency with industry-recognized penetration testing tools.

Responsabilités

• Penetration testing of web applications, IT infrastructure, and applications using defined methodologies.
• Assess security vulnerabilities in operating systems, software, protocols, and networks, and propose mitigations.
• Lead and participate in kickoff meetings to define testing requirements, scope, and rules of engagement.
• Prepare high-quality, structured technical reports in English and follow responsible disclosure for new vulnerabilities.
• Brief stakeholders and leadership on findings and outcomes.
• Execute tasks within a 1-week sprint framework and report outcomes in JIRA.

Connaissances

Web application pentest

Infrastructure pentest

UNIX/Windows admin

Python/PowerShell

Network security design

Formation

Bachelor's degree + 3 years experience

Alternative 10 years pentesting experience

Outils

Nmap

Burp Suite

Kali Linux

Metasploit

Description du poste

Penetration Testing Execution: Provide comprehensive web application, IT infrastructure, and application-level testing (including COTS and GOTS software) using defined methodologies .

Vulnerability & Risk Analysis: Assess security vulnerabilities within operating systems, software, protocols, and networks; evaluate risks and formulate actionable mitigation plans .

Stakeholder Alignment: Lead and participate in kick-off meetings to define testing requirements, scope, and rules of engagement .

Reporting & Responsible Disclosure: Write high-quality, structured technical reports in English . Follow the Responsible Disclosure Process for newly detected COTS vulnerabilities with vendors .

Executive Briefings: Brief stakeholders, technical teams, and high-level leadership (up to flag officer level) on security findings and assessment outcomes .

Agile Sprint Delivery: Execute tasks and report outcomes within a 1-week sprint framework, tracking activities inside JIRA .

Skill, Knowledge & Experience:

Education & Experience: Bachelor’s degree in an IT-heavy technical subject with 3 years of post-related experience . Alternatively, 10 years of extensive and progressive penetration testing experience can compensate for a degree .

Core Technical Expertise: Minimum 3 years of deep experience in web application and infrastructure penetration testing, network security architecture design, and UNIX/Windows system administration .

Tooling & Scripting: Strong proficiency with industry-recognized penetration testing tools and scripting skills in at least one language (Python, Go, PowerShell, or Shell) .

Advanced Security Concepts: Solid understanding of authentication protocols, cryptography, application security, malware infection techniques, and defensive technologies .

Desirable Certifications: Professional certifications such as OSCP, OSCE, OSWE, GPEN, CREST Certified Web Application Tester, GXPN, or GWAPT .

Language & Environment: Thorough proficiency in English is required . Prior experience in an international military/civilian environment or knowledge of NATO structures is highly beneficial .

Security Clearance: Must possess a valid, active NATO Secret security clearance .