Senior Penetration Test Engineer - Web & Mobile Security

Neev; Strasbourg; On-site; EUR 65,000 - 90,000; Full time

Job summary

Neev in Strasbourg seeks a senior IT security consultant with at least 7 years of experience to deliver penetration testing and security assessments across web, mobile, and desktop applications.

You will perform technical analyses, write reports, and advise on strengthening controls, with strong focus on confidential environments.

Required: university degree in IT, hands-on testing tools such as SonarQube, Fortify, Burp Suite, OWASP ZAP, and excellent English.

Qualifications

• University degree in IT with relevant professional experience.
• Experience with SAST: SonarQube, OWASP, FortifySCA, NVD.
• Experience with DAST, Web Application and Penetration Tests: Fortify WebInspect, OWASP ZAP, Burp Suite, Kali Linux.
• Experience with dependencies and containers tests: GitHub Advanced Security, JFrog XRay, JFrog Curation, Advanced Cluster Security.
• Experience in technical analysis, reporting and writing documents.
• Experience in decomposing and analysing systems to identify weaknesses and ineffective controls.
• Experience in reviewing codes assess their security.
• Excellent command of the English language.

Skills

Penetration testing

IT security consulting

Technical reporting

Threat modelling

Decomposition and analysis

Code security review

Education

University degree in IT

Tools

SonarQube

OWASP

FortifySCA

NVD

Fortify WebInspect

OWASP ZAP

Burp Suite

Kali Linux

GitHub Advanced Security

JFrog XRay

JFrog Curation

Advanced Cluster Security

Job description

Neev in Strasbourg seeks a senior IT security consultant with at least 7 years of experience to deliver penetration testing and security assessments across web, mobile, and desktop applications.

You will perform technical analyses, write reports, and advise on strengthening controls, with strong focus on confidential environments.

Required: university degree in IT, hands-on testing tools such as SonarQube, Fortify, Burp Suite, OWASP ZAP, and excellent English.