Penetration Tester

What awaits you

As a Penetration Tester, you find and analyze security gaps in the systems, applications, and infrastructures of our customers. Using offensive security techniques, established methods, and clear reports, you contribute to specifically strengthening the cyber resilience of our customers.

A versatile project environment with companies from various industries awaits you: You will work with offensive security techniques and modern tools, conduct technical security audits according to established methods such as OSSTMM, OWASP ASVS, or comparable testing procedures, and regularly engage in exchange with our customers. Many projects last one to two weeks; we accompany larger reviews over several months – depending on the assignment, either alone or in a dynamically assembled team. This allows you to use your strengths specifically, learn continuously, and benefit from a strong exchange of knowledge.

Your varied area of activity includes the following tasks:

• Searching and analyzing security gaps and vulnerabilities using penetration tests, code and config reviews, as well as reverse engineering in web applications, networks, cloud services and cloud components, mobile apps (iOS, Android), embedded devices, ICS (SCADA / DCS), complex infrastructures, etc.
• Developing appropriate proposed measures
• Documenting the project in the form of reports, advisories, etc.
• Further developing supporting tools and aids

What we offer you

You will take on responsibility step by step from the very beginning and will be accompanied by your team. In the event of challenges, you will always find someone who takes time for you and supports you. We also place great importance on your personal development, which we support through various internal and external training opportunities.

You can also look forward to the following:

• Your voice counts! With us, you actively participate in shaping things: Bring in your ideas, implement them independently, and use the freedom to make decisions and drive changes
• A "Du" culture (informal culture), where mutual respect, tolerance, and appreciation are lived, and feedback is an important part of our everyday life. We also count on your constructive criticism
• A structured induction program
• We offer you room for maneuver and decision-making so that you can gain your own experience and develop further
• Modern and spacious offices, just a few minutes' walk from the train station
• Possibility for Home Office
• Participation in health-promoting measures up to CHF 500
• 40-hour week and at least 5 weeks of vacation
• Smartphone with flat-rate subscription
• Additional day off on your birthday
• …and much more

What you bring with you

• Proven experience in penetration testing, application security testing, or in technical security audits
• Knowledge in web applications, networks, infrastructures, cloud environments, and/or mobile security
• Experience with offensive security techniques, testing tools, and methods such as OSSTMM, OWASP ASVS, or comparable standards
• Analytical approach in the identification, assessment, and documentation of vulnerabilities
• Experience in technical documentation, reports, and recommendations for measures
• Education or further training in computer science, cybersecurity, or a comparable technical field; relevant certifications (OSCP, OSSTMM, OPST, BSCP etc.) are an advantage
• Proficient German and good English skills, both written and spoken
• Impeccable reputation, verifiable via criminal and debt enforcement register extracts

Application

Have we ignited the fire in you? We look forward to your call or directly to your application documents. It is important to us that your passion for cybersecurity becomes clear in your insightful application. Show us with your application what you have already been working on, what drives you, and why you want to continue on this path. We will close professional or technical gaps together as part of our training program.

Please direct applications only: Inquiries from recruitment agencies / headhunters are not desired.

j4id10415798a j4it0940a j4iy26a