Penetration Tester — Red/Purple Team & IoT Security

Reply; Napoli; On-site; EUR 42,000 - 68,000; Full time

Job summary

Spike Reply's Cyber Security Team in Napoli, Italy, is seeking a security tester to perform comprehensive assessments across networks, mobile and web applications, and embedded/IoT products.

You will conduct audits, code reviews, and red/purple team activities, communicating findings to client IT teams and stakeholders, while advancing safety with scripting (Python, C) and varied OS knowledge.

Qualifications

• Experience performing security tests on networks, web and mobile apps.
• Knowledge of OWASP testing methodologies and secure coding practices.
• Proficiency in scripting (Python, C) and basic tooling for assessments.
• Strong communication skills and ability to convey findings to technical and non-technical audiences.

Responsibilities

• Perform security tests on Network Infrastructures
• Test Mobile Applications
• Test Web Applications
• Test Embedded/IoT products
• Security audit
• Red/Purple Team
• Write security assessment reports
• Communicate results to IT team
• Scripting and programming (e.g., Python, C)
• Deep knowledge of Windows, Linux/Unix, Android, iOS, MacOS
• Knowledge of networking concepts (protocols, routing)
• Good presentation and communication skills, teamwork and flexibility
• English language (oral and written)
• Aptitude to teamwork
• Flexibility
• Scripting and programming (e.g., Python, C)
• Deep knowledge of operating systems (Windows, Linux/Unix, Android, iOS, MacOS)
• OWASP

Skills

Security testing

Vulnerability assessment

OWASP knowledge

Python

C

Windows

Linux/Unix

Android

iOS

Networking concepts

Job description

Spike Reply's Cyber Security Team in Napoli, Italy, is seeking a security tester to perform comprehensive assessments across networks, mobile and web applications, and embedded/IoT products.

You will conduct audits, code reviews, and red/purple team activities, communicating findings to client IT teams and stakeholders, while advancing safety with scripting (Python, C) and varied OS knowledge.