Pentester / Ethical Hacker (Red Team)

Il y a 1 semaine

Brussels Brussels Region, BRU, Belgique Free-Work UK Temps plein
You test the security of end clients' information systems under real-world conditions. You identify, exploit and document vulnerabilities, then help teams fix them. Depending on your seniority, you progress from classic penetration testing to full Red Team operations. Responsibilities Perform penetration tests: web, API, mobile, infrastructure, Active Directory, cloud Conduct configuration and code audits (application security review) Run Red Team operations: social engineering, phishing, physical access, persistence, lateral movement Exploit and chain vulnerabilities to demonstrate real business impact Write clear reports: executive summary, technical details, prioritized recommendations Present findings to technical teams and leadership Support remediation and perform retests Develop internal tools and scripts (Python, PowerShell, Bash) Contribute to pre-sales: scope definition, estimation, proposal writing Maintain continuous watch on vulnerabilities and attack techniques (CVEs, TTPs) Profil Candidat Must-have 3+ years in pentesting or Red Team (consulting or in-house) Strong command of methodologies: OWASP (Top 10, ASVS), PTES, MITRE ATT&CK Solid skills in web / API application testing and/or Active Directory attacks Proficiency with tools: Burp Suite, Nmap, Metasploit, BloodHound, Cobalt Strike or equivalent Excellent report-writing skills Nice-to-have Certifications: OSCP, OSEP, OSWE, CRTO, GPEN, GXPN, PNPT Cloud exploitation (Azure, AWS) and containers (Kubernetes) Exploit development, EDR evasion, red team infrastructure Track record: published CVEs, CTFs, bug bounty, conference talks Knowledge of the Belgian framework: CCB, CyFun, TIBER-BE (financial sector)