Penetration Tester

OMEGA, Inc.; Frascati; In loco; EUR 35.000 - 43.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical benefits

Dental benefits

Vision benefits

Life and AD&D insurance

Disability programs

401(k) and profit sharing

Relocation assistance

Paid holidays and time off

Descrizione del lavoro

Particle Measuring Systems is seeking a Penetration Tester to perform security testing and validation of software, emphasizing vulnerability assessment, manual and automated testing, and documentation of findings.

Join a global leader in particle counting solutions and contribute to secure software used across multiple industries. We offer a permanent contract with a competitive salary package and comprehensive benefits including relocation assistance.

Competenze

• Experience in identifying, validating and documenting software vulnerabilities and security risks.
• Ability to perform security assessments using manual techniques and industry-standard tools.
• Experience with SAST/DAST and secure development lifecycle practices.
• Knowledge of CVSS methodology for vulnerability prioritization and risk evaluation.
• Familiarity with Agile/DevSecOps and CI/CD environments.
• Ability to produce clear technical reports detailing findings, risk levels and remediations.

Mansioni

• Vulnerability assessments: perform the assessment
• Penetration testing: manual and automated test
• Threat modeling: conduct threat modeling to identify potential security threats, assess risks, and define mitigation strategies.
• SAST/DAST analysis: analyze, validate and triage findings with developers and cyber security team.
• Vulnerability validation and security reporting: ensure compliance with cybersecurity requirements.
• Planning and implementation of testing strategies: define detailed plans to test software functionalities for cyber security.
• Identification and documentation of malfunctions: detect bugs and document them for resolution.
• Execution of automated and manual tests: use tools to automate or perform manual tests.
• Preparation of test reports: provide detailed documentation on tests performed and results.

Conoscenze

Security testing

Penetration testing

Threat modeling

CVSS

Secure SDLC

Security reporting

Formazione

Degrees in Electrical/Computer Science/Biomedical/Telecommunications/Automation Engineering

Strumenti

Burp Suite

OWASP ZAP

Nessus

Nmap

Metasploit

Git

Descrizione del lavoro

Do you want to be part of a business that genuinely values entrepreneurialism, innovation and individual accountability? We focus on our customers and are proud of the difference our technology makes. We partner with some of the biggest manufacturing companies in the world and our technical innovations are used to enhance well-known brands across multiple industries. Do you have a true passion for the Pharmaceutical or Electronic industries and for delivering the best solutions for our customers? We’re looking for a Penetration Tester that will take care of the preparation and execution of the tests necessary to verify the compliance of the software related cyber security. In addition he/ she has to prepare the documentation of each test delivered.

What you will do:

• Vulnerability assessments: perform the assessment
• Penetration testing: manual and automated test
• Threat Modeling: conduct threat modeling to identify potential security threats, assess risks, and define appropriate mitigation strategies.
• SAST/DAST analysis: to analysis, validate and triage and with developers and cyber security team the findings
• Vulnerability validation and security reporting: to ensure compliance with cybersecurity requirements.
• Planning and implementation of testing strategies: Define detailed plans to test the various functionalities of the software for cyber security side
• Identification and documentation of malfunctions: Detect bugs and issues, documenting them accurately to facilitate their resolution
• Execution of automated and manual tests: Use specific tools to automate tests or perform manual tests when necessary.
• Preparation of test reports: Provide detailed documentation on the tests performed and the results obtained

Key Requirements:

• Required Technical Skills: Security Testing and Vulnerability Assessment: Experience in identifying, validating and documenting software vulnerabilities and security risks.
• Manual and Tool-Based Penetration Testing: Ability to perform security assessments using both manual techniques and industry-standard penetration testing tools.
• Static and Dynamic Application Security Testing (SAST/DAST): Experience using source code analysis and dynamic testing methodologies to identify security vulnerabilities throughout the software development lifecycle.
• Vulnerability Risk Assessment: Knowledge of CVSS (Common Vulnerability Scoring System) methodology for vulnerability classification, prioritization and risk evaluation.
• Secure Development Lifecycle: Understanding of security integration within Agile, DevSecOps and CI/CD environments.
• Security Reporting: Ability to produce clear technical reports detailing findings, risk levels, remediation recommendations and validation results.

Nice to Have:

• Knowledge of public security advisories, CVE databases and vulnerability disclosure processes.
• Experience reviewing and understanding public CTF (Capture The Flag) writeups and security research publications.
• Familiarity with the MITRE ATT&CK framework and adversarial techniques.
• Security certifications such as OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker), GPEN (GIAC Penetration Tester) or equivalent certifications.
• Experience with common security testing tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit or similar.
• Knowledge of programming languages: Familiarity with languages such as Java, Python, or C# facilitates understanding code and creating automated test scripts.
• Knowledge of development methodologies: Understanding of Agile and DevSecOps frameworks to effectively integrate into modern development processes.
• Knowing of Scrum method is a plus, to integrates their tests into CI/CD (Continuous Integration/Delivery) processes, contributing in real-time to code quality.
• Knowledge of Operating Systems: Microsoft, Linux and RTOS as well as industrial automation programming languages SCADA and PLC is considered a plus.
• In addition to these, skills in scripting, use of version control systems like Git, and familiarity with virtualization environments are highly valued.
• Degrees in Electrical, Computer Science, Biomedical, Telecommunications and Automation Engineering may be taken into consideration.
• ISTQB (International Software Testing Qualifications Board) certification is a plus.

We offer permanent contract with a competitive salary package in the range of €40,000 - €50,000 gross annual salary, based on experience and seniority, along with a diverse range of benefits designed to support our employees' physical and emotional well-being.

Join us and be yourself. Inclusion is our ambition! Particle Measuring Systems is an equal opportunity employer, offering a safe and inclusive work environment, based on mutual respect and the appreciation of uniqueness, guaranteeing equal employment opportunities to all qualified candidates to unleash their full potential.

Particle Measuring Systems (PMS) specializes in viable and nonviable particle counters and particle counting solutions that measure and monitor contamination levels in clean and controlled environments. Since 1972, our knowledgeable and experienced team has been developing innovative technologies to advance the cleanroom monitoring industry. Led by our technology which provides accurate and reliable results and information for our clients, Particle Measuring Systems is one of the world’s leading companies and manufacturers for particle counting instruments, and molecular and microbial monitoring.

#LI-GG1 Particle Measuring Systems is a global leader in designing and manufacturing micro-contamination monitoring equipment. Based in Boulder, Colorado, our state of the art technology is instrumental in improving clean room performance in the semiconductor and pharmaceutical markets. Our specialized technology, and the challenging work necessary to create this technology, enables our company to attract talented team members so that everyone has the opportunity to reach their potential in engaging and stimulating roles. The diverse experience of our employees at all levels brings unique ideas and contributions to Particle Measuring Systems. Join Particle Measuring Systems and become part of a company that recognizes our success is driven by you!

We are an Equal Opportunity Employer, committed to affirmative action, a discrimination-free workplace, and fair treatment to all employees. We offer a competitive salary and benefit programs, including medical, dental, vision, life and AD&D insurance, short- and long-term disability programs, a flexible spending account, a tuition reimbursement program, a 401(k) plan, profit sharing, paid company holidays and paid time off. As part of our value system, we maintain a non-smoking campus and provide an onsite clinic for employees to emphasize health and well‑being in the workplace. We are proud to be an Equal Opportunity Employer.

• competitive salary
• medical
• dental
• vision
• life and AD&D insurance
• short- and long-term disability programs
• flexible spending account
• tuition reimbursement program
• 401(k) plan
• profit sharing
• paid company holidays
• paid time off

We offer relocation assistance for many of our positions.

Colorado is one of the best places to live in the USA.