Penetration Tester & Red Team Operator (Mid/Senior)

Quality & Reliability S.A. (QnR); Ohio; On-site; USD 90,000 - 130,000; Full time

Job summary

SysteCom, a member of QnR Group, seeks a Penetration Tester & Red Team Operator to test networks, apps, and cloud environments with authorized assessments and adversary simulations. You will work across Europe with senior collaborators to deliver resilient security postures.

Role requires hands-on testing across diverse environments, strong OWASP knowledge, and ability to craft clear remediation guidance for clients at senior levels.

Qualifications

• Conduct scoped vulnerability assessments and penetration tests.
• Perform manual validation and exploitation, not only automated scanning.
• Document findings, business impact, evidence and remediation.
• For red-team candidates, design adversary scenarios and lead client engagements.
• Work with defensive teams to improve prevention and detection.
• Apply OWASP guidance and safe rules of engagement.

Responsibilities

• Carry out authorized testing across apps, networks, and cloud.
• Develop realistic red-team scenarios and execute engagements.
• Deliver clear, actionable remediation guidance to clients.

Skills

Hands-on testing

OWASP knowledge

Manual validation & exploitation

Python scripting

PowerShell scripting

Bash scripting

Adversary simulation

Clear findings & remediation

Security operations awareness

Leadership in engagements

Education

OSCP/OSCP-like certification

OSWE/GPEN/GWAPT or equivalent

Tools

Python

PowerShell

Bash

Job description

Are you a Penetration Tester & Red Team Operator? Think bigger about your next move!

Build your future with QnR Group.
JOIN THE NEXT EUROPEAN TECHNOLOGY POWERHOUSE

Penetration Tester & Red Team Operator | SysteCom, member of QnR Group

Role overview

We are looking for a Penetration Tester & Red Team Operator to test the resilience of networks, applications, cloud environments and people through authorised security assessments and adversary simulation.

About QnR Group

QnR Groupis a technology group with 35 years of experience, 8 companies, 4 delivery centers and 210+ professionals across Greece, Belgium, Cyprus and Poland. Listed on the Athens Stock Exchange since 2000, we deliver mission-critical digital transformation projects for the public and private sector. The Group’s capabilities coverssoftware engineering, enterprise and generative AI, cybersecurity, cloud infrastructure, SAP and ServiceNow solutions, core banking and maritime intelligence.

About SysteCom

SysteCom, a member of QnR Group, specializes in cybersecurity, digital resilience and IT infrastructure. The company delivers solutions and services that help organizations protect their systems and data, strengthen operational continuity and modernize their technology environments. Bringing together security and infrastructure expertise, SysteCom supports businesses across sectors in building secure, reliable and resilient digital operations.

What you'll work on:

• Conduct scoped vulnerability assessments and penetration tests
• Perform manual validation and exploitation, not only automated scanning
• Document findings, business impact, evidence and practical remediation
• At senior levels, design red-team scenarios and lead client-facing engagements
• Work with defensive teams to improve prevention and detection

What you bring:

• Hands-on authorised testing experience across one or more of web applications, APIs, infrastructure, Active Directory, wireless, mobile or cloud environments
• Strong understanding of OWASP guidance, common attack paths, vulnerability classes and safe rules of engagement
• Ability to combine automated tooling with manual validation, exploitation and business-impact analysis
• Proficiency with common testing toolsets and scripting in Python, PowerShell, Bash or a comparable language
• Ability to produce clear, reproducible findings with evidence, severity rationale and practical remediation advice
• Understanding of operational security, data handling, legal boundaries and controlled test execution
• For red-team candidates, experience planning adversary scenarios, command-and-control operations, lateral movement and detection-evasion testing
• For senior candidates, experience scoping engagements, leading delivery and presenting findings to technical and executive stakeholders.

Required certifications:

Mid-level and Senior: at least one recognised practical certification, such as OSCP, OSWA, OSWE, GPEN, GWAPT, CRTO or equivalent

Senior red-team roles may require an advanced certification such as OSEP, OSED, OSCE3, GXPN or equivalent

Nice to have:

• OSCP, OSWA/OSWE, GPEN, GWAPT, CRTO or equivalent practical capability
• Purple-team, exploit-development or social-engineering experience where authorised