Penetration Tester (Offensive Security)

At Uni Systems, we are working towards turning digital visions into reality. We are continuously growing and we are looking for a Penetration Tester to join our UniQue Offensive Security and Assurance Unit team.

Our UniQue people come from a variety of different backgrounds and industries, with different skillsets and approaches, but they have one thing in common: passion for technology and innovation!

For the Penetration Tester role we expect you to:

• Perform internal and external infrastructure penetration testing, covering networks, systems and Active Directory environments.
• Conduct Web Application and API penetration testing using black-box, grey-box and white-box approaches.
• Perform vulnerability assessments, analyze scan results and manually validate identified vulnerabilities, including controlled exploitation where appropriate.
• Participate in Security Source Code Reviews to identify vulnerabilities and insecure coding practices.
• Prepare penetration testing and vulnerability assessment reports, including technical findings, supporting evidence, risk assessment and remediation recommendations.
• Perform re-testing to verify that identified vulnerabilities have been addressed.
• Explain and demonstrate the technical and business impact of identified vulnerabilities to clients.
• Develop or customize scripts and tools to support penetration testing activities.
• Participate in the planning and execution of security assessments, following the agreed scope, testing methodology and Rules of Engagement.
• Support specialized engagements, including Red Team operations, Mobile Application Penetration Testing and Social Engineering assessments.

Your experience, skillset and qualifications are going to help you succeed in this position, moving forward.

• University/College degree in Information Security, Computer Science, Information Technology or a related discipline, or equivalent practical experience.
• 3+ years of hands-on experience in Penetration Testing or Offensive Security.
• Hands-on experience in Web Application/API or Infrastructure Penetration Testing, with working knowledge of the other area.
• Experience in vulnerability assessments, manual testing and exploitation techniques.
• Familiarity with Security Source Code Review and common application security weaknesses.
• Good knowledge of Windows and Linux operating systems, networking concepts and Active Directory security.
• Understanding of common Web Application and API vulnerabilities, including the OWASP Top 10 and OWASP API Security Top 10.
• Experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, Nessus or equivalent.
• Experience with scripting and automation using Python, Bash, PowerShell or similar languages.
• Knowledge of penetration testing methodologies and frameworks, such as OWASP WSTG and PTES.
• Understanding of security technologies such as firewalls, IDS/IPS, WAFs and VPNs.
• Ability to prepare clear technical reports and communicate security findings to technical and business stakeholders.
• Excellent knowledge of the English language (written and verbal).
• Flexibility to travel abroad (mainly EU countries, approximately 5% of working time).

• Relevant penetration testing and offensive security certifications, such as OSCP, CEH, CPTS, PNPT, eCPPT, eWPT, CREST, GPEN, GWAPT, BSCP, CRTO or equivalent, will be considered an asset.
• Experience in Red Team operations, Mobile Application Penetration Testing or Social Engineering assessments.
• Experience in cloud security assessments, particularly Microsoft Azure or AWS.
• Master's Degree in Information Security or a related discipline.