Penetration Tester - Europe (m/f/d)

NeuVerge-Tron GmbH; München; Vor Ort; EUR 68.000 - 100.000; Vollzeit

Zusammenfassung

NeuVerge-Tron GmbH is seeking an experienced security professional to perform comprehensive penetration testing on web and mobile apps, identify vulnerabilities, and deliver actionable remediation guidance. You will document findings with clear risk analyses and stay abreast of evolving threats.

Ideal candidates have 3–5 years of hands-on security experience, proficiency with Burp Suite, Nmap, Metasploit, and programming basics in Python or JavaScript.

Qualifikationen

• 3–5 years of hands-on information security or penetration testing experience.
• Strong ability to identify web vulnerabilities such as SQLi, XSS, CSRF, and file upload issues.
• Experience with bug bounty programs is a plus.

Aufgaben

• Conduct security assessments and penetration tests on web and mobile apps and related systems.
• Identify, validate, document vulnerabilities, and provide remediation guidance.
• Create detailed penetration testing reports with risk analyses and exploit details.
• Monitor emerging threats and maintain awareness of latest vulnerabilities and defenses.
• Assist in incident response and security investigations as needed.
• Leverage bug bounty processes to improve overall security posture.

Kenntnisse

Penetration testing

Web security

Mobile security testing

Security tooling

English & Chinese (C1)

Bug bounty experience

Tools

Burp Suite

Nmap

Metasploit

Python/JavaScript basics

Jobbeschreibung

Your Mission

Greetings, fellow explorer of the digital realms!

We're excited to introduce a pivotal role that bridges our advanced technology with strong cyber defenses. Curious what this quest involves? Let's dive in:

• Conduct comprehensive security assessments and penetration tests on web applications, mobile apps, and associated systems.
• Identify, validate, and document vulnerabilities, provide actionable remediation recommendations, and track their resolution.
• Create detailed penetration testing reports, offering clear risk analyses and in-depth exploitation details.
• Stay alert to emerging threats by keeping up with the latest vulnerabilities, attack techniques, and defense strategies.
• Contribute your expertise to incident response and security investigations as needed.
• Knowledge and experience with bug bounty programs and their processes are highly valued.

Your Profile

That was intriguing, isn't it? Here's what will help you thrive and enjoy this role:

• 3-5 years of hands-on experience in information security or dedicated penetration testing roles.
• Strong expertise in identifying web security vulnerabilities such as SQL Injection, XSS, CSRF, and file upload issues.
• Proficiency in mobile application security testing for both Android and iOS platforms.
• Skilled with industry-standard security tools, including Burp Suite, Nmap, and Metasploit. Familiarity with programming languages like Python or JavaScript is an advantage.
• Excellent communication and documentation skills in both English and Chinese (C1 level for both).
• Practical experience with bug bounty programs is a plus.
• Strong analytical thinking, keen attention to detail, and the ability to clearly communicate technical findings to diverse audiences.
• Experience in large-scale internet or cloud environments is preferred.

Why Us?

Become part of an international, collaborative team where you'll help shape security operations from the ground up. You'll tackle meaningful challenges in cloud security and incident response, directly advancing the company’s security maturity. This role provides the unique opportunity to work closely with engineering, operations, and management teams in a dynamic, fast-paced environment.