Senior Offensive Security Engineer

bol; Utrecht; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

29 paid days of vacation

Travel cost reimbursement

Pension plan with premium covered

Annual bonus based on sustainability goals

Job summary

bol.com is looking for a Senior Ethical Hacker to join their Security Operations team in Utrecht. You will engage in offensive security activities to protect their web and cloud infrastructures, conducting penetration tests and threat modeling to ensure robust security across all platforms.

The ideal candidate has significant experience in penetration testing, strong knowledge of related technologies, and is proactive in identifying risks. The position offers generous benefits including 29 vacation days, a pension plan, and an annual bonus.

Qualifications

• Experience as a penetration tester in large engineering‑driven environments using open‑source tools.
• Strong knowledge of internet‑facing web applications, cloud‑native environments, GCP, Kubernetes, Linux, Java, and Spring.
• Excellent communication skills; able to explain findings to non‑technical stakeholders.

Responsibilities

• Conduct penetration tests on request and on your own initiative, prioritizing high‑risk threats.
• Review technical designs, perform threat modeling, and assess vulnerabilities in web applications, microservices, and networks.
• Collaborate with Red, Blue, and Purple squads, contributing to incident response and large security projects.
• Document findings, prepare reports, and communicate risks to product and engineering teams.

Skills

Penetration testing

Vulnerability assessment

Cloud-native environments

GCP

Kubernetes

Linux

Java

Spring

Tools

Open-source tools

Jira

Kanban

Scrum

Job description

bol.com is looking for a Senior Ethical Hacker to join their Security Operations team in Utrecht. You will engage in offensive security activities to protect their web and cloud infrastructures, conducting penetration tests and threat modeling to ensure robust security across all platforms.

The ideal candidate has significant experience in penetration testing, strong knowledge of related technologies, and is proactive in identifying risks. The position offers generous benefits including 29 vacation days, a pension plan, and an annual bonus.