Security/Penetration Test Engineer

EUROPEAN DYNAMICS; Strasbourg; Sur place; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Full benefits package

Competitive remuneration

Résumé du poste

EUROPEAN DYNAMICS is seeking a Security/Penetration Test Engineer based in France to join the Development team and closely collaborate with a major client's IT team. The role involves identifying vulnerabilities, testing attack vectors, and deploying testing tools across web, mobile, and desktop applications.

Ideal candidates possess a university IT degree with 7+ years of security consulting experience, strong reporting skills, and fluency in English.

Qualifications

• seven+ years of IT and information security services experience.
• Experience with penetration testing across web, mobile, and thick clients.
• Proven consulting experience in confidential environments.
• Familiarity with SAST: SonarQube, OWASP, FortifySCA, NVD.
• Familiarity with DAST/WebApp tests: Fortify WebInspect, OWASP ZAP, Burp Suite, Kali Linux.
• Experience with dependency and container tests: GitHub Advanced Security, JFrog XRay, JFrog Curation, ACS.
• Strong written reporting and documentation skills.
• Excellent English language command.

Responsabilités

• Identify and assess cybersecurity vulnerabilities.
• Demonstrate exploitation of vulnerabilities and test attack vectors.
• Develop penetration testing plans and procedures.
• Document results and remediation recommendations for stakeholders.
• Deploy testing tools and run SAST/DAST and vulnerability scans.
• Draft security test cases from requirements.

Connaissances

Penetration testing

Security assessment

English fluency

Formation

University degree in IT

Outils

SAST tools

DAST tools

Container security tools

Description du poste

We currently have a vacancy for a Security/Penetration Test Engineer fluent in English, to offer his/her services as an expert who will be based in France. The work will be carried out either in the company's premises or on site at customer premises. In the context of the first assignment, the successful candidate will be integrated in the Development team of the company that will closely cooperate with a major client's IT team.

Tasks

• Identify, analyse and assess technical and organisational cybersecurity vulnerabilities;
• Identify attack vectors, uncover and demonstrate exploitation of technical cybersecurity vulnerabilities;
• Test systems and operations compliance with regulatory standards;
• Select and develop appropriate penetration testing techniques;
• Organise test plans and procedures for penetration testing;
• Establish procedures for penetration testing result analysis and reporting;
• Document and report penetration testing results to stakeholders;
• Deploy penetration testing tools and test programs;
• Security source code review or development experience at least in C/C++, C#, VB.NET, ASP, or Java;
• Identify the security risk level, business impact and provide the remediation plan;
• Use tools and manual testing to perform code security analysts to identify vulnerabilities and attack vectors in applications and infrastructure. Execute SAST, DAST, vulnerability scans and penetration tests;
• Draft security test cases based on the requirements.

Requirements

• University degree in IT combined with relevant professional experience of at least 7 years in providing IT and Information security services;
• Experience with penetration testing against a wide variety of applications including web, mobile, and thick client above and beyond running automated tools required;
• Experience providing consulting services in a highly confidential environment;
• Experience with SAST: SonarQube, OWASP, FortifySCA, NVD;
• Experience with DAST, Web Application and Penetration Tests: Fortify WebInspect, OWASP ZAP, Burp Suite, Kali Linux;
• Experience with dependencies and containers tests: GitHub Advanced Security, JFrog XRay, JFrog Curation, Advanced Cluster Security;
• Experience in technical analysis, reporting and writing documents;
• Experience in decomposing and analysing systems to identify weaknesses and ineffective controls;
• Experience in reviewing codes assess their security;
• Industry certifications or similar qualifications appropriate to the services provided, such those listed below, will be considered a plus: GIAC Certified Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), Certified Ethical Hacker (CEH), GIAC Systems and Network Auditor (GSNA), Certified Penetration Tester (CPT), Certified Expert Penetration Tester (CEPT), GIAC Certified Web Application Defender (GWEB), ISC2 Certified Secure Software Lifecycle Professional (CSSLP), Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), CREST Penetration Testing Certifications.
• Excellent command of the English language.

Benefits

We offer a competitive remuneration (either on contract basis or remuneration with full benefits package), based on qualifications and experience. All applications will be treated as confidential.

EUROPEAN DYNAMICS (www.eurodyn.com) is a leading Software, Information and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Stockholm, London, Nicosia, Hong-Kong, Valetta, etc). The company employs over 1000 engineers, IT experts and consultants (around 3% PhD, 36% MSc and 53% BSc or equivalent). We design and develop software applications using state-of-the-art technology. The group generates annual revenues in the range of EURO 40 million, with an EBITDA in the range of 20%. The value of our contract portfolio exceeds EURO 300 million. EUROPEAN DYNAMICS is a renowned supplier of IT services to government institutions, multinational corporations, public administrations and multinational companies, research and academic institutes.

As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion

EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published in www.eurodyn.com/privacy. By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line to the Policy.