Senior Penetration Tester: Web, Infra & Red Team

Work Life Group; Eigenbrakel; On-site; EUR 70,000 - 110,000; Full time

Job summary

Wlgroup is seeking an experienced penetration tester to join its offensive security cell. The role blends hands-on testing with red and blue team exercises during large military exercises and reviews that prevent weaknesses from being built in the first place.

You will test web apps and IT infrastructure, review designs for policy alignment, and deliver concise, actionable reports to engineers, boards and senior officers. Real offensive work with serious targets awaits.

Qualifications

• Experience conducting web app and IT infrastructure penetration testing (3+ years).
• Knowledge of network security architecture and vulnerability assessment across OS, software, protocols, and networks.
• System and network administration on UNIX and Windows.
• Scripting skills in at least one: Perl, Python, Ruby or shell.
• Ability to write executive summaries and remediation plans with clear, actionable findings.

Responsibilities

• Test web applications, infrastructure and application layers with hands-on techniques.
• Lead or participate in red and blue team exercises during exercises.
• Review security designs against policy and advise projects on fixes before decisions are made.
• Prepare clear, targeted reports for engineers, boards and senior officers to drive action.
• Collaborate with accreditation and configuration control bodies to translate findings into fixes.

Skills

Web application security

Penetration testing

IT infrastructure testing

Red/Blue team experience

UNIX/Windows administration

Scripting (Perl/Python/Ruby/shell)

Security reporting

Job description

Find the weakness before anyone else does.

A multinational defence organisation is adding a penetration tester to its offensive security cell. The work is a genuine mix: hands-on testing, red and blue team play during large military exercises, and the design reviews that stop a weakness being built in the first place.

What you would be doing

• Testing web applications, infrastructure and application layers, with the tooling and methodology the job deserves rather than a scanner and a template
• Leading or joining red and blue team activity during military exercises
• Reviewing security designs against policy, and advising projects before decisions harden
• Briefing what you found to engineers, boards and senior officers, and writing it up so each audience can act on it
• Working closely with accreditation and configuration control bodies so findings turn into fixes

What you would bring

• More than three years of web application and IT infrastructure penetration testing
• Network security architecture, and vulnerability assessment across operating systems, software, protocols and networks
• System and network administration on both UNIX and Windows
• Scripting in at least one of Perl, Python, Ruby or a shell
• Authentication and security protocols, cryptography, application security, malware techniques and the defences against them
• Report writing you are proud of: executive summary, technical findings, a remediation plan

Why this one is worth a look

Real offensive work against serious targets, with exercises that most testers never get near.