Penetration Tester & Security Engineer — Hybrid

Scaleway; Lille; Hybride; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Hybrid work up to 3 days remote per wk

Dynamic, international team

Résumé du poste

Scaleway is expanding its Trust & Security Operations to strengthen internal pentesting across cloud products. You will simulate cyberattacks, identify vulnerabilities, and help improve security posture in a collaborative, international team.

You will join a 5-person security squad responsible for proactive security, including SOC/CSIRT activities, secure development, and offensive security initiatives.

Qualifications

• Hands-on experience with web, API, network, and infrastructure pentests.
• Solid knowledge of OWASP Top 10, MITRE ATT&CK, CVE and exploitation techniques.
• Experience with security tools such as Nmap, Metasploit, Burp Suite or OWASP ZAP.
• Strong scripting or development skills (Python, Bash, SQL, PHP or similar).
• Understanding of exploitation techniques like XSS, SQLi, buffer overflow.

Responsabilités

• Conduct web, API, network, and infrastructure penetration tests on Scaleway products and internal systems
• Simulate realistic cyberattack scenarios to identify vulnerabilities and risks
• Participate in Red Team or adversarial simulations and social engineering campaigns
• Assess and prioritize vulnerabilities based on risk and impact
• Write clear security reports and communicate findings to stakeholders
• Collaborate with product and engineering teams to remediate and improve security
• Contribute to the design and implementation of the internal pentesting tool stack
• Stay updated on emerging vulnerabilities, exploits and offensive techniques
• Support continuous security testing workflow across Scaleway products

Connaissances

Penetration testing

OWASP Top 10

MITRE ATT&CK

Nmap

Burp Suite

Metasploit

OWASP ZAP

Python

Bash

Outils

Nmap

Metasploit

Burp Suite

OWASP ZAP

Description du poste

Scaleway is expanding its Trust & Security Operations to strengthen internal pentesting across cloud products. You will simulate cyberattacks, identify vulnerabilities, and help improve security posture in a collaborative, international team.

You will join a 5-person security squad responsible for proactive security, including SOC/CSIRT activities, secure development, and offensive security initiatives.