Senior Penetration Tester

Approach Cyber; Mont-Saint-Guibert; Hybride; EUR 70 000 - 100 000; Plein temps

Avantages offerts par ce poste

Mobility budget

Group insurance & pension

32 days holiday

Flexible home working

Annual bonus

Meal vouchers

Eco vouchers

Bike lease

Résumé du poste

Approach Cyber in Belgium is seeking a Senior Pentester to join our Security Operations Centre. You will perform penetration tests across applications, APIs, infrastructure, networks, and IoT, and conduct red teaming exercises to identify vulnerabilities.

The role involves reporting, remediation recommendations, staying current with threats, mentoring juniors, and representing the company at events. A hybrid work arrangement with an attractive salary package is offered.

Qualifications

• Minimum 5 years of pentesting/red-teaming experience.
• Excellent spoken and written English.
• Strong knowledge of web app security testing and network/infrastructure testing.
• Experience with industry-standard tools and reporting.

Responsabilités

• Perform applications, API, infrastructure, networks, and IoT pentesting and red teaming.
• Conduct reverse engineering of binaries or obfuscated code to identify risks.
• Identify, analyze, and exploit vulnerabilities per OWASP, MITRE ATT&CK, and NIST.
• Provide detailed risk-based reports with remediation recommendations.
• Stay up to date with threats and improve tools/techniques.
• Mentor junior team members and contribute to business development.

Connaissances

5+ years pentesting

English proficiency

Analytical skills

Team player

Outils

Burp Suite

ffuf

Nuclei

Nessus

Bloodhound

Impacket

NetExec

Python scripting

Description du poste

Approach Cyber is a pure player in cybersecurity and personal data protection.

We provide 360-degree solutions to strengthen our clients’ cyber resilience: anticipate, prevent, protect, detect, respond, and recover. We are committed to delivering top-tier services, including advisory and audit, training and awareness, security technology integration, and software development. Approach is also a recognised Managed Security Service Provider (MSSP) thanks to our Security Operations Centre (SOC).

With over 100 experts based in Belgium and Switzerland, Approach Cyber draws on 25 years of experience and thousands of successfully delivered projects across multiple industries. We are recognised for our expertise, our human approach, and our pragmatic execution.

We are looking for a Senior Pentester with a strong record of pentesting engagement to integrate our Security Operations Centre. You will take part in stimulating offensive assignments which will include technical security assessments for different environments including applications (web, API, …), infrastructure, network and internet of things.

As a Senior Pentester, you will play a crucial role in identifying and mitigating security vulnerabilities across different environments.

You will conduct stimulating penetration tests or red teaming exercises, analyze security risks, and provide actionable recommendations to enhance the security posture of our clients.

Here are just a few of the responsibilities you should take on:

• Perform applications, API’s, infrastructures, networks/cloud and internet of things penetration testing and red teaming exercises,
• Conduct reverse engineering of binaries, or obfuscated code to identify vulnerabilities and security risks
• Identify, analyze, and exploit security vulnerabilities in accordance with industry standards (OWASP, MITRE ATT&CK, NIST, etc.),
• Provide detailed reports on findings, including risk assessments and remediation recommendations,
• Stay up to date with the latest cybersecurity threats, attack techniques, and security best practices and tools,
• Use your knowledge to continually improve the tools, techniques and procedures used by your team,
• Contribute to market development by developing a business/commercial approach towards potential customers and ensuring external visibility (which can take various forms, such as presence at trade shows, conference presentations, use cases, creation of CTFs, participation in networking groups, etc).
• Mentor new young team members by supporting them in their day-to-day responsibilities and advising them on technology and skills development.

You have:

• Minimum 5 years of experience in pentesting and red teaming activities,
• A true passion for ethical hacking: pentesting exercices on platforms such as Hack The Box, Try Hack Me, or participation in CTF's, or technology watch (whitepapers, blogposts, …), etc
• An excellent spoken and written English.
• A strong knowledge of
• Web application security testing
• Network/infra security testing
• Penetration testing tools such as Burp Suite, ffuf, Nuclei, Nessus, Bloodhound, Impacket, NetExec, ...
• Scripting and automation using Python or Bash or any programming language.

Considered as a plus:

• Your ability to speak/write/understand French or Dutch at a professional level remains a strong plus.
• Your information security certifications such as: OSCP, CRTO, eCPPT, OSCE, or other red teaming/pentesting certifications
• Your knowledges on one of these technologies : Cobaltstrike, Mythic
• Your experience on mobile security testing projects.
• Curiosity: Ethical hacking is constantly evolving. New vulnerabilities, new tools, new methodologies... The good pentester you are loves to dig, test, experiment, and continuously learn.
• Deep analytical skills and problem-solving: A pentest is like a puzzle. You need to analyze a system, identify potential weaknesses, and find attack paths that others might not have considered.
• Clear and impactful communication: You know that a great security report isn't just about listing vulnerabilities; it's about telling a story that makes sense to non-technical stakeholders. You translate complex findings into clear, actionable insights.
• Team spirit: Cybersecurity is a team effort. You share knowledge, discuss trends, and support your teammates, knowing that collaboration makes everyone stronger.
• Integrity above all: You handle sensitive information with the highest level of confidentiality and professionalism. Trust is at the core of everything you do.
• Last but not least, we would like you to become an ambassador for the professional values that are at the heart of our philosophy:
• TOP-NOTCH
• HUMAN-CENTRIC
• NO-NONSENSE
• Join a dynamic and fast-growing company in a booming sector
• Participate in the development of the company as a co-creator of innovative solutions
• Develop your career path and add top-level trainings and certifications to your CV
• Benefit from an attractive salary package, including a full range of benefits:
• Mobility budget you can use for a company car (electrical) or other green or shared mobility initiatives or housing costs.
• Competitive group insurance including pension fund, death, and disability coverage,
• Attractive complementary insurances for non-work-related accident and loss of salary in case of sickness, company fully supported contribution (hospitalisation and outpatient care)
• 32 days holiday/year (on a fulltime equivalent basis)
• Flexible home working policy (2,5 days/week minimum at office)
• Bonus based on your annual objectives
• Other fringe benefits (meal vouchers, eco vouchers, bike lease, …)
• Enjoy some fun company events and exclusive team experiences
• Contribute to a safer, fairer world for data subjects and citizens, ensure the serenity of great businesses and essential public institutions.
• Live your values daily in a dynamic, fun and multicultural working environment.