Security/Penetration Test Engineer

ThoughtLabs Belgium; Strasbourg; On-site; EUR 70,000 - 110,000; Full time

Job summary

ThoughtLabs Belgium is seeking a senior IT security consultant with extensive hands-on experience in penetration testing across web, mobile, and thick clients. You will contribute to security assessments, architecture reviews, and detailed reporting, while ensuring confidentiality in high-sensitivity environments.

The role requires strong English command, proven consulting skills, and familiarity with SAST/DAST tooling (SonarQube, Fortify, OWASP) and related security standards.

Qualifications

• University degree in IT with relevant experience (7+ years).
• Experience with penetration testing across web, mobile and thick clients.
• Consulting experience in confidential environments is required.
• SAST/DAST tooling and standards experience with the listed tools.
• Experience in technical analysis, reporting and documentation.

Skills

Penetration testing

Security consulting

Threat assessment

Technical writing

Security reporting

SAST/DAST knowledge

Code review

English proficiency

Education

University degree in IT

Tools

SonarQube

OWASP

FortifySCA

NVD

Fortify WebInspect

OWASP ZAP

Burp Suite

Kali Linux

GitHub Advanced Security

JFrog XRay

JFrog Curation

Advanced Cluster Security

Job description

• University degree in IT combined with relevant professional experience of at least 7 years in providing IT and Information security services;
• Experience with penetration testing against a wide variety of applications including web, mobile, and thick client above and beyond running automated tools required;
• Experience providing consulting services in a highly confidential environment;
• Experience with SAST: SonarQube, OWASP, FortifySCA, NVD;
• Experience with DAST, Web Application and Penetration Tests: Fortify WebInspect, OWASP ZAP, Burp Suite, Kali Linux;
• Experience with dependencies and containers tests: GitHub Advanced Security, JFrog XRay, JFrog Curation, Advanced Cluster Security;
• Experience in technical analysis, reporting and writing documents;
• Experience in decomposing and analysing systems to identify weaknesses and ineffective controls;
• Experience in reviewing codes assess their security;
• Industry certifications or similar qualifications appropriate to the services provided, such those listed below, will be considered a plus: GIAC Certified Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), Certified Ethical Hacker (CEH), GIAC Systems and Network Auditor (GSNA), Certified Penetration Tester (CPT), Certified Expert Penetration Tester (CEPT), GIAC Certified Web Application Defender (GWEB), ISC2 Certified Secure Software Lifecycle Professional (CSSLP), Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), CREST Penetration Testing Certifications.
• Excellent command of the English language.