Security Pentester – IoT
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
Our client, a major organization in the public safety sector, is looking for a specialist to secure their IoT platform. The role involves identifying and documenting vulnerabilities across a complex ecosystem of connected devices, network infrastructure, and cloud environments to ensure data integrity and availability.
- Analyze technical architectures and data flows to identify critical assets and attack surfaces.
- Perform penetration tests (black, grey, and white box) on IoT devices, edge computing, and gateways.
- Evaluate cloud security posture across platforms like Azure, AWS, or GCP, focusing on IAM and containerization.
- Conduct security assessments of web applications, APIs, and mobile platforms following OWASP standards.
- Test firmware, hardware interfaces, and communication protocols for embedded systems.
- Produce detailed technical reports and executive summaries including risk levels and remediation guidance.
- Validate the effectiveness of security fixes through retesting and support technical teams during implementation.
- 5+ years of experience in offensive security and penetration testing.
- You bring expertise in penetration testing methodologies, geolocated exploitation, and lateral movement.
- You possess deep knowledge of IoT security including firmware analysis and hardware interfaces such as UART , JTAG , or SWD .
- You have experience with cloud security on Azure , AWS , or GCP , specifically with IAM, Kubernetes , and CI/CD pipelines.
- You're proficient in web application and API security using OWASP frameworks and protocols like OAuth 2.0 , SAML , or JWT .
- You bring technical mastery of network protocols including MQTT , RTSP , TLS/mTLS , and PKI .
- You have hands-on experience with offensive tools such as Burp Suite , Metasploit , Nmap , and Wireshark .
- You possess scripting skills in Python , PowerShell , or Bash for security automation.
- You're an effective communicator capable of mentoring colleagues and presenting results to management.
- You have an active knowledge of Dutch , French , and English .
Nice to Haves
- Possession of certifications such as OSCP , OSWE , OSEP , GPEN , or SEC556 .
- Higher degree in Computer Science, Cybersecurity, or Telecommunications.
- Start date: 01/11/2026
- Duration: 2 months
- Work regime: Full-time
- Location: Brussels
- Working model: Onsite
- Contract: open to both permanent employees and freelancers