Pentester Infrastructure & Applications - CLA

Keoni; Paris; Hybrid; EUR 55,000 - 90,000; Full time

Job summary

Keoni in Paris is seeking a seasoned penetration tester to strengthen information system security by performing tests on applications, infrastructure, and data flows.

You will conduct security analyses, exploit identified vulnerabilities in a controlled environment, and deliver detailed audit reports plus prioritized remediation recommendations for technical teams and business stakeholders.

Autonomy, rigor, and the ability to explain complex findings to non-specialists are essential.

Qualifications

• Proficiency in penetration testing and security audit methodologies.
• Ability to analyze architectures, data flows and configurations.
• Experience using vulnerability scanning and controlled exploitation tools.

Responsibilities

• Prepare test campaigns with scenarios, prerequisites, and rules of engagement.
• Conduct technical security analyses and targeted penetration tests.
• Document findings with risk levels and remediation recommendations.
• Present results to technical and business stakeholders.

Skills

Penetration testing

Security audit methodologies

Vulnerability analysis

Data flow analysis

Documentation

Communication skills

Tools

OWASP

MITRE ATT&CK

Job description

# Pentester Infrastructure & Applications - CLA* Home* Pentester Infrastructure & Applications - CLA* July 8, 2026* 0 Comments* By Roberte OkoyaContext: As part of strengthening information system security, the mission consists of conducting technical security analyses and targeted penetration tests on applications, infrastructure, and data flows. This component aims to reduce exposure to cyber risks, prioritize remediation measures, and enhance the continuity of essential services supported by the information system. Mission: The penetration tester intervenes within the framework of an information system and cybersecurity audit. They assess the security level of applications, infrastructure, and data flows, identify exploitable vulnerabilities, and formulate remediation recommendations tailored to business and technical challenges. Mission Objectives : • Identify technical vulnerabilities likely to affect the confidentiality, integrity, or availability of the information system. • Assess the risks related to applications, infrastructure, configurations, and data flows. • Conduct targeted penetration tests using a structured and controlled methodology. • Prioritize corrective actions based on the level of criticality and business impact. • Contribute to the continuous improvement of the organization's cybersecurity posture. Scope of intervention : • Internal, external, or internet-exposed applications. • System infrastructures, networks, and associated technical environments. • Sensitive or business-critical data flows. • Technical components contributing to the continuity of essential services. Main activities : • Prepare test campaigns by defining scenarios, prerequisites, and rules of engagement. • Conduct technical security analyses and targeted penetration tests. • Exploit identified vulnerabilities in a controlled environment to measure their actual impact. • Document findings, technical evidence, criticality levels, and associated risks. • Present results to technical and business stakeholders. • Propose pragmatic, prioritized, and context-appropriate remediation recommendations. • Support teams in understanding vulnerabilities and monitoring remediation efforts. Expected deliverables: • Validated test plan and scope. • Technical audit report detailing identified vulnerabilities. • Managerial summary of risks and remediation priorities. • Technical and organizational recommendations. • Corrective action prioritization table. • Oral presentation of results to relevant stakeholders. Expected Skills • Proficiency in penetration testing and security audit methodologies. • Sound knowledge of application, system, and network vulnerabilities. • Ability to analyze technical architectures and data flows. • Proficiency in penetration testing, vulnerability scanning, and technical analysis tools. • Ability to explain technical findings clearly to non-specialist audiences. • Rigor in documentation, risk assessment, and recommendation formulation. Required Profile • Proven cybersecurity profile with significant experience in application and infrastructure penetration testing. • Strong understanding of system, network, directory, exposed service, and application architecture environments. • Experience using penetration testing, vulnerability scanning, network analysis, and controlled exploitation tools. • Knowledge of security frameworks and best practices, including OWASP, MITRE ATT&CK, CVSS, and audit methodologies. • Ability to produce clear, structured, and usable deliverables for both technical teams and business stakeholders. • Autonomy, rigor, a strong sense of confidentiality, and the ability to work within a controlled and secure environment. • Excellent communication skills to present findings, explain risks, and support remediation plans. Mission Details: The mission will be conducted in coordination with the relevant cybersecurity, infrastructure, application, and business teams. All interventions must adhere to established rules of engagement, service availability constraints, and confidentiality requirements applicable to the data processed.Please send your CV, cover letter, and copies of your diplomas to [e-mail]