Senior Security Test Engineer: Penetration & Code Review

ThoughtLabs Belgium; Strasbourg; On-site; EUR 65,000 - 95,000; Full time

Job summary

ThoughtLabs Belgium is seeking an experienced IT security consultant with a strong background in penetration testing and security assessments. The candidate should possess a university IT degree and at least seven years of relevant experience, including consulting in confidential settings.

A broad toolkit including SAST and DAST technologies is required, with hands-on work across web, mobile, and thick clients. Excellent English communication is essential.

Qualifications

• University degree in IT combined with at least 7 years in providing IT and Information security services.
• Experience with penetration testing across web, mobile, and thick client environments.
• Experience providing consulting services in a highly confidential environment.
• Experience with SAST: SonarQube, OWASP, FortifySCA, NVD.
• Experience with DAST, Web Application and Penetration Tests: Fortify WebInspect, OWASP ZAP, Burp Suite, Kali Linux.
• Experience with dependencies and containers tests: GitHub Advanced Security, JFrog XRay, JFrog Curation, Advanced Cluster Security.
• Experience in technical analysis, reporting and writing documents.
• Experience in decomposing and analysing systems to identify weaknesses and ineffective controls.
• Experience in reviewing codes to assess their security.
• Excellent command of the English language.

Skills

Penetration testing

Consulting

English proficiency

Education

University degree in IT

Tools

SonarQube

OWASP

FortifySCA

NVD

Fortify WebInspect

OWASP ZAP

Burp Suite

Kali Linux

GitHub Advanced Security

JFrog XRay

JFrog Curation

Advanced Cluster Security

Job description

ThoughtLabs Belgium is seeking an experienced IT security consultant with a strong background in penetration testing and security assessments. The candidate should possess a university IT degree and at least seven years of relevant experience, including consulting in confidential settings.

A broad toolkit including SAST and DAST technologies is required, with hands-on work across web, mobile, and thick clients. Excellent English communication is essential.