Senior Penetration Tester

Edwards Lifesciences; Valenza; Remoto; EUR 85.000 - 111.000; Tempo pieno

Descrizione del lavoro

A global healthcare company is seeking a Senior Penetration Tester to enhance its security posture across cloud and hybrid environments. The ideal candidate has over 7 years of experience in offensive security, particularly in AWS and Azure. Responsibilities include executing penetration tests, developing security methodologies, and collaborating with stakeholders. This is a remote position with a focus on teamwork and innovation.

Competenze

• 7+ years of experience in offensive security, focusing on cloud penetration testing.
• Relevant certifications preferred (e.g., OSCP, OSEP, etc.).
• Experience with Active Directory security is a plus.

Mansioni

• Execute advanced penetration tests and red team engagements.
• Design and implement offensive security methodologies.
• Identify and exploit vulnerabilities in various systems.

Conoscenze

Offensive security expertise

Cloud penetration testing

Scripting proficiency

Analytical skills

Communication skills

Formazione

Bachelor’s or Master’s degree in Computer Science or related field

Strumenti

AWS

Azure

Python

Bash

PowerShell

MITRE ATT&CK

Descrizione del lavoro

Overview

Important Note: This role is a remote opportunity, and it is tied to the legal entity in the country of hire. Therefore, candidates must be physically located in one of these countries and legally authorized to work there. Due to employment regulations, we are unable to consider applicants based outside these locations posted.

Innovation starts from the heart. At Edwards Lifesciences, we’re dedicated to developing ground-breaking technologies with a genuine impact on patients’ lives. At the core of this commitment is our investment in cutting-edge information technology. This supports our innovation and collaboration on a global scale, enabling our diverse teams to optimize both efficiency and success. As part of our team, your expertise and commitment will help facilitate our patient-focused mission by developing and enhancing technological solutions.

What you’ll do

Senior Penetration Tester will provide deep technical expertise in offensive security across a wide range of modern enterprise environments, including cloud infrastructure, web applications and enterprise technologies. Execute penetration tests, purple team exercises and red team operations targeting AWS environments, enterprise applications, and other critical systems. Collaborate with stakeholders to assess, exploit, and strengthen the security posture of diverse technology stacks and architectures.

Responsibilities

• Execute advanced penetration tests and red team engagements across diverse environments, including cloud, on-premises, and hybrid infrastructures.
• Design and implement offensive security methodologies to simulate real-world attack scenarios.
• Identify and exploit vulnerabilities, misconfigurations, and privilege escalation paths in various systems and services.
• Develop and maintain custom tools and scripts to support exploitation, automation, and reporting.
• Perform root cause analysis of security issues and deliver actionable remediation guidance.
• Collaborate with internal teams to enhance security posture through knowledge sharing, tool development, and methodology refinement.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field.
• 7+ years of experience in offensive security, with focus on cloud (AWS, Azure) penetration testing.
• Relevant certifications preferred (e.g., OSCP, OSEP, CRTO, CRTL, CARTS, ARTE).

Preferred

• Deep understanding of cloud platforms (e.g., AWS, Azure) and their core services, along with common security misconfigurations and attack vectors.
• Proficiency in scripting languages such as Python, Bash, or PowerShell, and familiarity with offensive security tools (e.g., Impacket, Pacu, ROADtools, or similar).
• Strong knowledge of adversary tactics and techniques, including frameworks like MITRE ATT&CK and other threat emulation methodologies.
• Excellent analytical and problem-solving skills with a keen attention to detail.
• Ability to design and execute complex attack chains across cloud, hybrid, and on-premises environments.
• Capable of planning and executing stealthy operations with a strong focus on operational security (OPSEC).
• Strong communication skills, including the ability to write clear technical reports and engage effectively with stakeholders.
• Experience with Active Directory security, red team operations, or threat emulation is a plus.