Penetration Tester - Europe

Sungrow-EMEA; Deutschland; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Sungrow-EMEA is seeking a security-focused penetration tester to join our international team in Germany. You will perform security assessments on web and mobile apps, identify vulnerabilities, and provide remediation recommendations, reporting findings clearly to technical and non-technical audiences.

We value experience with Burp Suite, Nmap, Metasploit, and bug bounty programs. Strong communication in English and Chinese is required; experience with cloud environments is a plus.

Qualifikationen

• 3–5 years hands-on information security or pen testing experience.
• Proficient in identifying web vulnerabilities: SQLi, XSS, CSRF, file upload flaws.
• Experience in mobile app security testing for Android and iOS; proficient with Burp Suite, Nmap, Metasploit.
• Strong English and Chinese communication and documentation skills (C1 level).
• Experience with bug bounty programs is a plus.

Aufgaben

• Conduct security assessments and penetration tests on web and mobile apps and related systems.
• Identify, validate, document vulnerabilities; provide remediation recommendations and monitor fixes.
• Create comprehensive penetration testing reports with risk analyses and exploit details.
• Monitor emerging threats and latest vulnerabilities, attack methods, and defense tactics.
• Support incident response and security investigations when needed.
• Familiarity with bug bounty processes is valued.

Kenntnisse

Penetration testing

Information security

Analytical thinking

Communication skills

Bug bounty experience

Tools

Burp Suite

Nmap

Metasploit

Python

JavaScript

Jobbeschreibung

Your mission

Greetings, fellow explorer of the digital realms!

We're thrilled to present a pivotal role that connects our cutting-edge technology with robust cyber defenses. Curious what this quest entails? Let's dive right in:

• Conduct thorough security assessments and penetration tests on web applications, mobile apps, and associated systems.
• Identify, validate, and document vulnerabilities, then provide actionable remediation recommendations and monitor their implementation.
• Craft detailed penetration testing reports, offering clear risk analysis and intricate exploitation specifics.
• Maintain vigilance against emerging threats, staying abreast of the latest vulnerabilities, attack methodologies, and defense tactics.
• Lend your expertise to incident response and security investigations when the need arises.
• A keen understanding and familiarity with bug bounty programs and their processes is highly valued.

Your profile

• Possess 3-5 years of hands‑on experience in information security or dedicated penetration testing roles.
• Demonstrate strong expertise in identifying web security vulnerabilities such as SQL Injection, XSS, CSRF, and file upload flaws.
• Be well‑versed in mobile application security testing techniques for both Android and iOS platforms. Exhibit proficiency with industry‑standard security tools including Burp Suite, Nmap, and Metasploit. Familiarity with programming languages like Python or JavaScript is a definite advantage.
• Command strong communication and documentation skills in both English and Chinese (C1 level for both).
• Hands‑on experience with bug bounty programs is a plus.
• Possess strong analytical thinking, meticulous attention to detail, and the ability to articulate technical findings clearly to diverse audiences.
• Experience in large‑scale internet or cloud environments is preferred.

Why us?

Join an international and collaborative team where you will be instrumental in building security operations capabilities from the ground up. You will tackle meaningful cloud security and incident response challenges, directly contributing to the company's overall security maturity. This role offers a unique opportunity to work closely with engineering, operations, and management teams in a dynamic and fast‑paced environment.

About us

We are a green tech company with young creative minds. We are fighting every day to make our mission happen - Clean Power for All! With 870+GW of clean power presently installed worldwide, we are on the road to success! Founded in 1997 by University Professor Cao Renxian, Sungrow is a leader in the research and development of solar inverters with the largest dedicated R&D team in the industry and a broad product portfolio offering PV inverter solutions and energy storage systems for utility‑scale, commercial & industrial, and residential applications, as well as internationally recognized floating PV plant solutions, NEV driving solutions, EV charging solutions and renewable hydrogen production systems.