IT Security Engineer (m/f/d) – Penetration Testing & Red Teaming

VamiSec GmbH; Bonn; Híbrido; EUR 65 000 - 95 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work

Professional development

Autonomy

Flat hierarchies

Competitive compensation

Resumo da oferta

VamiSec GmbH in Germany is seeking an IT Security Engineer (m/f/d) specialized in penetration testing and red teaming. You combine attacker mindset with engineering rigor to assess web apps, APIs, cloud and networks.

You will perform pentests, lead red team engagements, and test AI apps. You will work in a remote-first setup with occasional Bonn office meetings, and contribute to evolving OWASP-aligned playbooks to strengthen client security postures.

Qualificações

• Several years of experience in penetration testing or red teaming.
• In-depth knowledge of web/API security, AD and MITRE ATT&CK.
• Proficient with Burp Suite, BloodHound, Nuclei and Metasploit; Python/PowerShell scripting.
• Excellent German (C1) and good English.
• OSCP, OSEP, OSWE, CRTO or similar certifications are a plus.

Responsabilidades

• Penetration tests of web applications, APIs, cloud environments, internal networks and AD.
• Red team engagements and reporting for management and engineering.
• Pentests of AI applications and agents with CVSS and AIVSS assessments.
• Steer and validate agentic pentests with VamiRedteam with proof of concept for findings.
• Evolve methodology and playbooks along OWASP standards (WSTG, ASVS).

Conhecimentos

Penetration testing

Red teaming

Web security

APIs security

MITRE ATT&CK

Burp Suite

BloodHound

Nuclei

Metasploit

Python

PowerShell

German (C1)

Ferramentas

Burp Suite

BloodHound

Nuclei

Metasploit

Python

PowerShell

Descrição da oferta de emprego

IT Security Engineer (m/f/d) – Penetration Testing & Red Teaming

Hybrid: mostly remote within Germany, occasionally at our Bonn office.

You think like an attacker and work like an engineer – in classic pentests, red team engagements and AI system testing, supported by VamiRedteam.

• Penetration tests of web applications, APIs, cloud environments, internal networks and Active Directory
• Red team engagements and assumed-breach scenarios, including reporting for management and engineering
• Pentests of AI applications and agents (prompt injection, jailbreaks, tool abuse), rated with CVSS and AIVSS
• Steer and validate agentic pentests with VamiRedteam – human in the loop, every finding with a proof of concept
• Evolve methodology and playbooks along the OWASP standards (WSTG, ASVS)

Your profile

• Several years of experience in penetration testing or red teaming
• In-depth knowledge of web and API security, Active Directory and common attack techniques (MITRE ATT&CK)
• Confident with tools such as Burp Suite, BloodHound, Nuclei or Metasploit and scripting in Python or PowerShell
• Excellent German (at least C1) and good English
• A plus: OSCP, OSEP, OSWE, CRTO or comparable certifications

What We Offer

Why VamiSec?

Remote-First

Flexible work from anywhere in Germany – we trust in results.

Professional Development

Certifications, training, and conferences – we invest in your growth.

Responsibility

Autonomous work on exciting projects for renowned clients.

Team

Small, highly motivated team with flat hierarchies and direct communication.

Competitive salaries, bonuses, and benefits – transparent and performance-based.

Impact

Your work makes organizations and critical infrastructure more secure.