Senior Penetration Test Engineer | Enterprise Security

Neev; Strasbourg; On-site; EUR 60,000 - 90,000; Full time

Job summary

Neev is seeking an experienced IT security consultant focused on penetration testing and security assessments. The role covers web, mobile, and thick client testing, with extensive use of SAST and DAST tools, plus container and dependency security evaluations.

You will contribute to technical analyses, create detailed reports, and help identify weaknesses in complex systems while maintaining strict confidentiality and high English-language standards.

Qualifications

• University degree in IT with at least 7 years of IT and information security experience.
• Experience with penetration testing across web, mobile, and thick client applications.
• Experience delivering consulting in highly confidential environments.
• Experience with SAST tools: SonarQube, OWASP, FortifySCA, NVD.
• Experience with DAST and testing tools: Fortify WebInspect, OWASP ZAP, Burp Suite, Kali Linux.
• Experience with dependencies and containers tests: GitHub Advanced Security, JFrog XRay, JFrog Curation, ASC.
• Experience in technical analysis, reporting and writing documents.
• Experience in decomposing and analysing systems to identify weaknesses and ineffective controls.
• Experience in reviewing code to assess security.
• Industry cybersecurity certifications are a plus (GPEN, GWAPT, CEH, GSNA, CPT, CEPT, GWEB, CSSLP, OSCP, CREST).
• Excellent command of English language.

Skills

Penetration testing

Consulting

Technical analysis

Report writing

Threat modelling

Code review

English proficiency

Education

University degree in IT

Cybersecurity certifications (plus)

Tools

SonarQube

OWASP

FortifySCA

NVD

Fortify WebInspect

OWASP ZAP

Burp Suite

Kali Linux

GitHub Advanced Security

JFrog XRay

JFrog Curation

Advanced Cluster Security

Job description

Neev is seeking an experienced IT security consultant focused on penetration testing and security assessments. The role covers web, mobile, and thick client testing, with extensive use of SAST and DAST tools, plus container and dependency security evaluations.

You will contribute to technical analyses, create detailed reports, and help identify weaknesses in complex systems while maintaining strict confidentiality and high English-language standards.