Penetration Tester & Security Assessor (Hybrid)

ASML; Veldhoven; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

ASML is seeking an experienced Ethical Hacker to perform authorized penetration testing across applications, infrastructure, and cloud environments. You will lead scoping, produce actionable reports, and present risk remediation options to both technical and non-technical stakeholders in a hybrid setting in the Netherlands.

The role requires 3+ years of offensive security experience, familiarity with web apps, APIs, VDIs, AI-related testing, and relevant certifications.

Qualifications

• 3+ years of experience in penetration testing or offensive security.
• Experience testing web applications, APIs, and cloud environments.
• Certifications in offensive security are a plus; OSCP/GPEN/OSWE/GWAPT or equivalent preferred.

Responsibilities

• Plan and conduct authorized security assessments across diverse technologies and environments.
• Lead intake: clarify objectives, define scope, and agree on engagement rules with stakeholders.
• Produce clear technical reports and executive summaries detailing evidence, impact, and remediation.
• Present findings to technical and non-technical audiences and verify remediation effectiveness.
• Collaborate with developers and security stakeholders to remediate risks while staying objective.
• Improve testing methodologies, tooling, and knowledge assets; create awareness content and training.

Skills

Web security testing

Infrastructure security

Cloud security testing

Programming experience

Communication

Time management

Stakeholder liaison

Education

Cybersecurity degree

Computer science background

Job description

ASML is seeking an experienced Ethical Hacker to perform authorized penetration testing across applications, infrastructure, and cloud environments. You will lead scoping, produce actionable reports, and present risk remediation options to both technical and non-technical stakeholders in a hybrid setting in the Netherlands.

The role requires 3+ years of offensive security experience, familiarity with web apps, APIs, VDIs, AI-related testing, and relevant certifications.