Share this job
You test the security of end clients' information systems under real-world conditions. You identify, exploit and document vulnerabilities, then help teams fix them. Depending on your seniority, you progress from classic penetration testing to full Red Team operations.
Responsibilities
Perform penetration tests: web, API, mobile, infrastructure, Active Directory, cloud
Conduct configuration and code audits (application security review)
Run Red Team operations: social engineering, phishing, physical access, persistence, lateral movement
Exploit and chain vulnerabilities to demonstrate real business impact
Write clear reports: executive summary, technical details, prioritized recommendations
Present findings to technical teams and leadership
Support remediation and perform retests
Develop internal tools and scripts (Python, PowerShell, Bash)
Contribute to pre-sales: scope definition, estimation, proposal writing
Maintain continuous watch on vulnerabilities and attack techniques (CVEs, TTPs)
Candidate profile
Must-have
3+ years in pentesting or Red Team (consulting or in-house)
Strong command of methodologies: OWASP (Top 10, ASVS), PTES, MITRE ATT&CK
Solid skills in web / API application testing and/or Active Directory attacks
Proficiency with tools: Burp Suite, Nmap, Metasploit, BloodHound, Cobalt Strike or equivalent
Excellent report-writing skills
Nice-to-have
Certifications: OSCP, OSEP, OSWE, CRTO, GPEN, GXPN, PNPT
Cloud exploitation (Azure, AWS) and containers (Kubernetes)
Exploit development, EDR evasion, red team infrastructure
Track record: published CVEs, CTFs, bug bounty, conference talks
Knowledge of the Belgian framework: CCB, CyFun, TIBER-BE (financial sector)
Apply to this job!
Find your next career move from +10,000 jobs!
Manage your visibility
Salary, remote work... Define all the criteria that are important to you.
Get discovered
Recruiters come directly to look for their future hires in our CV library.
Join a community
Connect with like-minded tech and IT professionals on a daily basis through our forum.
Pentester / Ethical Hacker (Red Team)
Groupe Aptenia