(Senior) Penetration Tester & Security Consultant

Fressnapf Deutschland; Krefeld; Hybrid; EUR 75.000 - 105.000; Vollzeit

Benefits dieser Stelle

Mobiles Arbeiten pro Anteil

Teamkultur & Events

Dynamisches Umfeld

Individuelle Weiterbildung

Hund an Büro-Standorten

Vorsorge & Gesundheitsangebote

Zusammenfassung

Fressnapf Deutschland sucht eine erfahrene Sicherheitsfachkraft für Offensiv-Security. Sie führen Penetrationstests durch, koordinieren Vulnerability-Management-Aktivitäten und arbeiten eng mit Detection & Response sowie IT-Infrastruktur zusammen, um Sicherheitslücken frühzeitig zu erkennen und nachhaltig zu schließen.

Sie arbeiten an der Weiterentwicklung der internen Offensiv-Sicherheitsfähigkeiten, unterstützen neue Systeme und Architekturen vor dem Go-Live und berichten klar an Stakeholder.

Qualifikationen

• Expertenwissen in Infrastruktur, Cloud und Identity Security.
• Praxisnahe Penetrationstests von Web- und API-Systemen gemäß OWASP.
• Nachweisbare Zertifizierungen oder vergleichbare Praxisqualifikation erwünscht.

Aufgaben

• Eigenständige Durchführung von internen Penetrationstests und Koordination externer Assessments.
• Validierung gefundener Schwachstellen und Priorisierung nach Geschäftsrisiko.
• Durchführung von Retests und Sicherheits reviews vor Live-Gängen.
• Mitwirkung beim Purple Teaming zur Verbesserung von SIEM, EDR und Monitoring.
• Schutz neuer Systeme durch Threat Modeling und Security Reviews.

Kenntnisse

Infrastruktur-Sicherheit

Cloud-Sicherheit

Identitätssicherheit

Web/API-Penetration

Dokumentation

Ausbildung

OSCP

PNPT

BSI IT-Grundschutz Practitioner

Tools

Burp Suite

Nmap

BloodHound

PingCastle

Git

Jobbeschreibung

Westpreußenstraße 32-38, 47809 Krefeld

ab sofort

ID: 5056

We do everything we can to make the lives of pets and pet parents easier, better and happier: Happier Pets. Happier People. We achieve this because we know our customers better than anyone else – because we are pet friends like them. This mindset has made us Europe’s number one in pet supplies – a position we are determined to strengthen. That's why we are looking for people who take responsibility, think boldly, and want to grow with us. Do you want to shape the future of retailing? Welcome to Fressnapf!

Das bewegst du bei uns

• In this role, you will perform internal penetration tests independently and take over the technical coordination as well as the scoping of external security assessments.
• You will validate and verify discovered vulnerabilities within the Vulnerability Management framework to determine their actual exploitability and prioritize them based on real business risk.
• Following successful remediation by the responsible teams, you will independently conduct structured retests to ensure that the security findings are sustainably resolved.
• As part of Purple Teaming activities, you will purposefully simulate modern attacker techniques and work closely with the Detection & Response team to verify and continuously improve the effectiveness of existing SIEM, EDR, and monitoring controls.
• You will support new systems, critical architectures, and major infrastructure changes before they go live by conducting thorough security reviews and threat modeling.
• Your goal will be to identify potential attack paths and structural security weaknesses early on, effectively preventing them from becoming operational risks.
• Acting as a key sparring partner, you will collaborate cross-functionally with teams across Detection & Response, Vulnerability Management, Incident Management, IT, and Engineering to turn findings into real security improvements.
• You will actively drive the sustainable establishment and strategic development of our internal offensive security capability, directly shaping the overall security maturity of the company.

Das bringst du mit

• You bring a deep understanding of infrastructure, cloud, and identity security, along with solid hands-on experience in web and API penetration testing according to established frameworks like OWASP.
• In your daily work, you are proficient with standard security tools such as Burp Suite, Nmap, BloodHound, PingCastle, and Git, and you possess strong scripting skills.
• Ideally, you hold recognized offensive security certifications such as OSCP, PNPT, CRTO, GWAPT, or possess a comparable practical qualification such as a BSI IT-Grundschutz Practitioner or Consultant.
• You have proven technical experience reviewing and testing complex environments, including Linux, Windows, Powershell, and Active Directory architectures.
• Experience working within German or European regulatory environments, such as ISO 27001, BSI IT-Grundschutz, TISAX, KRITIS, or NIS2, is considered a strong plus.
• You are characterized by strong documentation and reporting skills, enabling you to structure complex technical findings clearly and track them effectively for all stakeholders.
• Fluent German language skills as well as excellent English skills are required to ensure seamless and precise communication across all internal and external interfaces.

Das bekommst du von uns

• Your freedom: pro rata mobile working and flexible working hours
• Your team: open, familiar, appreciative culture including team events
• Your environment: dynamic, innovative and agile working environment
• Your role: high level of personal responsibility and freedom to implement your ideas
• Your development: regular trainings and seminars in our academy
• Your four-legged friend: dogs are welcome in our offices (campus)
• Your health: numerous offers for preventive care, fitness, Yoga@work, etc.
• Your benefits: employee discounts, company leasing bikes, company pension plan and much more

Weitere Informationen

This position will be filled at Fressnapf Tiernahrungs GmbH within the Fressnapf | Maxi Zoo Group.