Senior Ethical Hacker

bol; Utrecht; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

29 paid days of vacation

Travel cost reimbursement

Pension plan with premium covered

Annual bonus based on sustainability goals

Job summary

bol.com is looking for a Senior Ethical Hacker to join their Security Operations team in Utrecht. You will engage in offensive security activities to protect their web and cloud infrastructures, conducting penetration tests and threat modeling to ensure robust security across all platforms.

The ideal candidate has significant experience in penetration testing, strong knowledge of related technologies, and is proactive in identifying risks. The position offers generous benefits including 29 vacation days, a pension plan, and an annual bonus.

Qualifications

• Experience as a penetration tester in large engineering‑driven environments using open‑source tools.
• Strong knowledge of internet‑facing web applications, cloud‑native environments, GCP, Kubernetes, Linux, Java, and Spring.
• Excellent communication skills; able to explain findings to non‑technical stakeholders.

Responsibilities

• Conduct penetration tests on request and on your own initiative, prioritizing high‑risk threats.
• Review technical designs, perform threat modeling, and assess vulnerabilities in web applications, microservices, and networks.
• Collaborate with Red, Blue, and Purple squads, contributing to incident response and large security projects.
• Document findings, prepare reports, and communicate risks to product and engineering teams.

Skills

Penetration testing

Vulnerability assessment

Cloud-native environments

GCP

Kubernetes

Linux

Java

Spring

Tools

Open-source tools

Jira

Kanban

Scrum

Job description

Overview

Senior Ethical Hacker – a key member of bol.com’s Security Operations team. You perform offensive security activities to protect our web, cloud, and infrastructure environments and help our engineers secure new features and products.

Responsibilities

• Conduct penetration tests on request and on your own initiative, prioritizing high‑risk threats.
• Review technical designs, perform threat modeling, and assess vulnerabilities in web applications, microservices, and networks.
• Collaborate with Red, Blue, and Purple squads, contributing to incident response and large security projects.
• Provide rapid guidance to software teams and respond to security alerts.
• Document findings, prepare reports, and communicate risks to product and engineering teams in a clear, respectful manner.

Qualifications

• Experience as a penetration tester in large engineering‑driven environments using open‑source tools.
• Strong knowledge of internet‑facing web applications, cloud‑native environments, GCP, Kubernetes, Linux, Java, Spring, and related technologies.
• Proven ability to perform deep assessments and to adapt testing approaches to the specific context.
• Excellent communication skills; able to explain findings to non‑technical stakeholders.
• Self‑motivated, detail‑oriented, and proactive – you identify risks before they are reported.

What Makes You a Good Fit

• You are resourceful and do not wait for problems to be assigned; you find and fix them.
• YOU pay close attention to technical detail and uncover hidden threats.
• You are able to prioritize risk and focus on the most critical issues first.

What You Should Avoid

• Discomfort with organized workflows (e.g., jira, Kanban, Scrum).
• Adopting “security by obscurity” – you should be transparent and approachable with product teams.
• Isolating yourself from engineering peers – collaboration is essential.

Benefits

• 29 paid days of vacation.
• Travel cost reimbursement for public transport, car, parking, and charging.
• Pension plan with 75 % premium covered by the employer.
• Annual bonus based on sustainability goals.

bol.com is a B‑Corp certified company committed to equality and equal opportunities for all.