Penetration Tester Expert
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
Operating mode : Hybrid
Type of contract : Freelance
Start date : ASAP
Level of education required : Bac+5
Looking for a new challenge ? Join Eleveight
We are hiring on behalf of our partner in the technology sector and are looking for a Penetration Tester Expert to take on the following responsibilities :
-
The Penetration Testing Expert is responsible for:
· Execute web application penetration tests to identify vulnerabilities such as input validation issues, authentication flaws, and access control issues.
· Assess web applications against acknowledged security best practices such as OWASP Top 10.
· Conduct network and system-level penetration tests to identify vulnerabilities such as lack of patching, weak security configurations, and weak passwords.
· Utilize security tools such as Kali Linux, Nmap, and Burp Suite to conduct manual and automated security testing.
· Document testing procedures and results and provide detailed reports to stakeholders on vulnerabilities identified and potential impact.
· Work with the security team to recommend and implement remediation plans, and with IT teams to ensure that assessments and remediations do not impact business operations.
· Share Pentest knowledge and methodology with the other members of the Pentest team.
Profile required
Technical & functional skills
· Bachelor’s or Master’s degree in computer science, Information Technology or a related field.
· Experience with security assessment methodologies such as risk assessment, vulnerability assessment, and threat modeling.
· At least 5 years of experience in penetration testing and vulnerability assessments.
· Relevant certifications related to penetration testing.
· Proficient in vulnerability assessment tools (e.g., Nmap, Nessus, Burp Suite, Metasploit)
· Strong understanding of network protocols and architectures (TCP/IP, DNS, HTTP/S)
· Skilled in manual exploitation techniques and writing proof-of-concept exploits
· Experience with web application security testing (OWASP Top 10, API fuzzing, authentication bypass)
· Familiarity with Windows, Linux, and macOS environments
· Scripting ability in Python, Bash, PowerShell, or JavaScript
· Knowledge of Active Directory, LDAP, and privilege escalation techniques
· Ability to document findings and deliver clear, actionable reports
· Understanding of cloud security (AWS, Azure, GCP) and container environments (Docker, Kubernetes)
· Communication skills to handle different stakeholders (IT, Business, security teams.).
· IT security expertise.
· Ability to gather and analyze data and translate it into actionable insights.
· Ability to work well in a team and cross-functional environment.
· Ability to work with people from different culture and environment.
Languages
· English – Mandatory.
· French – Optional.
About Eleveight
Eleveight is a consulting and recruitment company specializing in tailored talent solutions to support businesses in their transformation.
We connect top experts in Change & Transformation, Business Applications, and Data & AI with ambitious projects, offering opportunities that match their skills and career goals. With our personalized approach and international network, we provide high-quality support throughout the process, ensuring engaging missions and a work environment that fosters professional growth. Join Eleveight and unlock opportunities that recognize your expertise and accelerate your career.