Pentester

Cloudheed; Frankfurt; On-site; EUR 60,000 - 80,000; Full time

Job summary

Cloudheed in Frankfurt is looking for a skilled Penetration Tester to join their security team. In this role, you will conduct penetration tests on web applications, APIs, and infrastructure to identify vulnerabilities and maintain high security standards. Candidates should have at least 3 years of experience in penetration testing, a strong understanding of common vulnerabilities, and proficiency in security tools like Burp Suite and Metasploit. Fluency in both German and English is required.

Qualifications

• 3+ years of experience in penetration testing or security research.
• Strong knowledge of OWASP Top 10 and common vulnerabilities.
• Ability to write clear and detailed security reports.

Responsibilities

• Conduct penetration tests on web applications, APIs, and infrastructure.
• Perform vulnerability assessments and security audits.
• Document findings and provide remediation recommendations.

Skills

Penetration testing

Vulnerability assessments

Security audits

Security tools (Burp Suite, Metasploit, Nmap)

Knowledge of OWASP Top 10

Programming skills (Python, Go)

Communication skills (German, English)

Tools

Burp Suite

Metasploit

Nmap

Job description

We are seeking a skilled Penetration Tester to join our security team. You will be responsible for identifying vulnerabilities in our infrastructure and applications, helping us maintain the highest security standards for our customers.

Responsibilities

• Conduct penetration tests on web applications, APIs, and infrastructure
• Perform vulnerability assessments and security audits
• Document findings and provide remediation recommendations
• Collaborate with development teams to fix security issues
• Stay up-to-date with the latest security threats and attack techniques
• Contribute to security awareness training
• Assist with SOC 2 and ISO 27001 compliance efforts

Requirements

• 3+ years of experience in penetration testing or security research
• Strong knowledge of OWASP Top 10 and common vulnerabilities
• Experience with security tools (Burp Suite, Metasploit, Nmap, etc.)
• Understanding of network protocols and web technologies
• Ability to write clear and detailed security reports
• Programming skills in at least one language (Python, Go, etc.)
• Good communication skills in German and English

Nice to Have

• Security certifications (OSCP, CEH, etc.)
• Experience with cloud security (AWS, GCP)