Penetration Tester (40264)

As a senior Penetration Tester, you'll dive deep into the internals of applications, networks, and systems—simulating real-world attacks and helping clients fix what attackers might exploit. From OWASP-style web app tests to advanced code analysis and social engineering campaigns, this role offers variety, autonomy, and continuous learning. You'll also build hacking demos, run incident simulations, and share your expertise in technical workshops. You must speak German and English fluently, and know your way around tools like BurpSuite, Nmap, Metasploit, and Kali Linux.

🚀 Projekt
- conducting and leading security testing projects
- reviewing security-relevant applications, products, and services (all types of penetration tests, code reviews, red/purple teaming, etc.)
- developing customer-specific measures to address identified security vulnerabilities
- reviewing architectural concepts within the scope of threat analyses
- creating technical security concepts
- conducting phishing and social engineering campaigns
- conducting technical workshops
- creating hacking demos and incident exercises
- gaining insight into diverse industries of national and international clients with daily new challenges in project-based teams
- active engagement with leading-edge technology stacks, trends, and the current security threat landscape
- collaborating closely with Austrian colleagues on international projects in a German-speaking environment
- spoken and written fluent German

🎯 Skills
- good German and English skills, both written and spoken
- familiarity with common penetration testing tools (BurpSuite, Nmap, Kali, Metasploit, etc.)

💡 Nice to have
- completed studies
- experience in software development (especially scripting), good knowledge of at least one of the following technologies: Python, Go, PHP, C# is advantageous
- experience with Linux/Windows troubleshooting
- experience with AWS or Azure is a plus Experience in testing web applications (e.g., OWASP Web Application Testing Guide)
- passionate interest in cyber security
- understanding and testing applications, networks, and systems
- ability to quickly learn new things in the field of cyber security
- knowledge in system and application security