Penetration Tester - Cloud security

Cyvex.io; Paris; À distance; EUR 50 000 - 90 000; Plein temps

Résumé du poste

An innovative startup is seeking a skilled Penetration Tester specializing in cloud security. This full-time remote role involves conducting thorough pentests on cloud and hosted applications, evaluating security postures, and performing audits on SaaS and container security. The ideal candidate will have a strong background in cloud security, application security, and red teaming. You'll be part of a dynamic team dedicated to enhancing cloud security for diverse clients. If you're passionate about cybersecurity and ready to make a significant impact, this opportunity is perfect for you.

Qualifications

• 3-5 years of experience in penetration testing focused on cloud and web applications.
• Strong understanding of OWASP Top 10 and security frameworks.

Responsabilités

• Conduct pentests on cloud and hosted applications to assess security posture.
• Perform Infrastructure-as-Code audits and support clients in securing environments.

Connaissances

Cloud Security

Application Security

Red Teaming

Cybersecurity

Problem-Solving Skills

Analytical Skills

Regulatory Compliance

Formation

Bachelor's Degree in Computer Science

Master's Degree in Information Security

Outils

Cloud Audit Tools

Web Application Penetration Testing Tools

Description du poste

Important : this is a freelance opportunity

Company Description

Cyvex.io is a French startup dedicated to cloud security. They assist companies in securing their cloud environments, containers, SaaS applications, and multi-cloud deployments from configuration to production. Cyvex.io offers personalized audits, cloud-native pentests, and in-depth analyses of Terraform, Kubernetes, and SaaS infrastructures.

Role Description

This is a full-time remote role for a Penetration Tester - Cloud Security at Cyvex.io. The Penetration Tester will be responsible for conducting pentests on cloud and hosted applications, assessing cloud security posture, auditing SaaS security, and evaluating container and Kubernetes security. They will also perform Infrastructure-as-Code audits and support clients in securing their cloud environments.

Qualifications

• Experience with cloud security (AWS, Azure, GCP).
• Application Security and Red Teaming expertise
• Cybersecurity knowledge
• Experience in conducting penetration tests and security assessments
• Familiarity with regulatory compliance
• Strong problem-solving and analytical skills
• Ability to work independently and remotely
• Bachelor's or Master's degree in Computer Science, Information Security, or related field

Requirements

• 3–5 years of experience in penetration testing, focusing on cloud, web applications, APIs, and mobile apps.
• Proficiency with tools such as for cloud audit and webapp penetration testing
• Strong understanding of OWASP Top 10 (Web, API, Mobile) and other security frameworks.
• Experience testing authentication mechanisms, including OAuth, JWT, SAML, and API key-based authentication.
• Familiarity with GraphQL security testing and API fuzzing techniques.
• Strong written and verbal communication skills for client reporting and presentations.
• Ability to translate technical risks into business impact for clients.
• Ability and willingness to perform network and wireless penetration testing and social engineering when required.

If you feel that your qualifications, talents, and values align with our culture, we welcome you to apply by submitting your resume today or send us an email on [emailprotected]