Senior Security Testing Specialist

Tula Consulting; Strasbourg; Presencial; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

Tula Consulting is seeking a Senior Security Testing Specialist to secure complex IT environments, identify vulnerabilities, and translate findings into practical security improvements. The role emphasizes hands-on testing across networks and applications and collaboration with security teams.

Ideal candidates bring a Master’s degree, at least six years of ICT security experience, and strong knowledge of ISO 27001/NIST/SANS/OWASP, plus Linux, Windows, and threat-hunting capabilities.

Qualificações

• Master’s degree or equivalent qualification; four years of higher education after secondary school.
• At least six years of professional ICT security experience, including hands-on testing and assessments.
• Strong knowledge of ISO 27001, NIST, SANS Critical Controls, and OWASP.
• Practical expertise in Linux, Windows, TCP/IP, network security, and application security.
• Experience with SIEM, IAM, IDS/IPS, firewalls, DLP, PKI, and vulnerability management platforms.
• Experience in security monitoring, incident response, threat hunting, and forensic analysis.
• Excellent English communication and reporting skills.
• French language skills and certifications such as OSCP, OSCE, GPEN, CISSP-ISSAP, CISM, CISA, or CEH.

Responsabilidades

• Conduct network and web application penetration testing using Black Box, Grey Box, and White Box approaches.
• Perform vulnerability assessments, security audits, and configuration reviews.
• Review source code against secure development principles and OWASP best practices.
• Define security baselines, hardening guidelines, and technical security procedures.
• Support security architecture and the implementation of technical controls.
• Analyze logs, investigate threats, and contribute to incident response and digital forensics.
• Assess and manage IAM and privileged access solutions.
• Deliver clear security reports and actionable remediation recommendations.

Conhecimentos

Penetration testing

Vulnerability assessments

Security audits

OWASP

Linux

Windows

Network security

Application security

IAM

SIEM

IDS/IPS

Firewalls

DLP

PKI

Vulnerability management

Incident response

Forensics

Report writing

Formação académica

Master’s degree

Post-secondary qualification

Ferramentas

SIEM

IAM

IDS/IPS

Firewalls

DLP

PKI

Vulnerability management platforms

Descrição da oferta de emprego

Do you have a strong background in penetration testing, vulnerability assessments, and technical security audits?

We are looking for a Senior Security Testing Specialist to help secure complex IT environments, identify vulnerabilities, and turn technical findings into practical security improvements.

What you’ll do

• Conduct network and web application penetration testing using Black Box, Grey Box, and White Box approaches.
• Perform vulnerability assessments, security audits, and configuration reviews.
• Review source code against secure development principles and OWASP best practices.
• Define security baselines, hardening guidelines, and technical security procedures.
• Support security architecture and the implementation of technical controls.
• Analyse logs, investigate threats, and contribute to incident response and digital forensics.
• Assess and manage IAM and privileged access solutions.
• Deliver clear security reports and actionable remediation recommendations.

What you bring

• A Master’s degree or equivalent qualification, with at least four years of completed higher education after secondary school.
• At least six years of professional ICT security experience, including hands‑on security testing and assessments.
• Strong knowledge of ISO 27001, NIST, SANS Critical Controls, and OWASP.
• Practical expertise in Linux, Windows, TCP/IP, network security, and application security.
• Experience with technologies such as SIEM, IAM, IDS/IPS, firewalls, DLP, PKI, and vulnerability management platforms.
• Experience in security monitoring, incident response, threat hunting, and forensic analysis.
• Excellent English communication and reporting skills.
• French language skills and relevant certifications such as OSCP, OSCE, GPEN, CISSP-ISSAP, CISM, CISA, or CEH.

#CyberSecurity #PenetrationTesting #InformationSecurity #SecurityTesting #Freelance #Strasbourg