Security Pentester – IoT

Il y a 3 heures

Brussels, Belgique Pauwels Consulting Temps plein

Our client, a major organization in the public safety sector, is looking for a specialist to secure their IoT platform. The role involves identifying and documenting vulnerabilities across a complex ecosystem of connected devices, network infrastructure, and cloud environments to ensure data integrity and availability.

  • Analyze technical architectures and data flows to identify critical assets and attack surfaces.
  • Perform penetration tests (black, grey, and white box) on IoT devices, edge computing, and gateways.
  • Evaluate cloud security posture across platforms like Azure, AWS, or GCP, focusing on IAM and containerization.
  • Conduct security assessments of web applications, APIs, and mobile platforms following OWASP standards.
  • Test firmware, hardware interfaces, and communication protocols for embedded systems.
  • Produce detailed technical reports and executive summaries including risk levels and remediation guidance.
  • Validate the effectiveness of security fixes through retesting and support technical teams during implementation.
  • 5+ years of experience in offensive security and penetration testing.
  • You bring expertise in penetration testing methodologies, geolocated exploitation, and lateral movement.
  • You possess deep knowledge of IoT security including firmware analysis and hardware interfaces such as UART , JTAG , or SWD .
  • You have experience with cloud security on Azure , AWS , or GCP , specifically with IAM, Kubernetes , and CI/CD pipelines.
  • You're proficient in web application and API security using OWASP frameworks and protocols like OAuth 2.0 , SAML , or JWT .
  • You bring technical mastery of network protocols including MQTT , RTSP , TLS/mTLS , and PKI .
  • You have hands-on experience with offensive tools such as Burp Suite , Metasploit , Nmap , and Wireshark .
  • You possess scripting skills in Python , PowerShell , or Bash for security automation.
  • You're an effective communicator capable of mentoring colleagues and presenting results to management.
  • You have an active knowledge of Dutch , French , and English .

Nice to Haves

  • Possession of certifications such as OSCP , OSWE , OSEP , GPEN , or SEC556 .
  • Higher degree in Computer Science, Cybersecurity, or Telecommunications.
  • Start date: 01/11/2026
  • Duration: 2 months
  • Work regime: Full-time
  • Location: Brussels
  • Working model: Onsite
  • Contract: open to both permanent employees and freelancers