Required skills
- Penetration Testing
- Offensive Security
- Vulnerability Assessment
- Web Application Security
- API Security
- Network Security
- Windows Security
- Linux Security
- Active Directory Security
- Cloud Security
- Red Teaming
- Purple Teaming
Languages: French
Job description
Seeking a Senior Penetration Tester/Offensive Cybersecurity Expert to conduct in-depth penetration tests on critical infrastructures, business applications, and technical environments. The role involves identifying vulnerabilities, designing attack scenarios, and assisting technical teams with remediation.
Project overview
As part of strengthening the resilience of its information systems, we are looking for a Senior Pentester/Offensive Cybersecurity Expert to conduct in-depth penetration tests on the client's critical infrastructures, business applications, and technical environments.
The consultant will need to identify exploitable vulnerabilities, design realistic attack scenarios, and assist technical teams in remediating security flaws.
They will also contribute to the development and execution of an annual audit plan, in collaboration with the CISO teams.
Main missions
Technical skills sought
Public sector: Security clearance required
- Scoping and execution of penetration tests
- Define the perimeters, objectives, and methodologies for test campaigns.
- Conduct penetration tests on Web applications, APIs, and business applications.
- Audit network infrastructures, Windows/Linux systems, Active Directory, and Cloud environments.
- Design Red Team / Purple Team scenarios to assess SOC detection capabilities.
- Vulnerability analysis and remediation
- Identify and exploit vulnerabilities within authorized perimeters.
- Document flaws, proofs of concept (PoC), and associated impacts.
- Assess vulnerability criticality according to CVSS methodologies.
- Propose technical recommendations and conduct re-audits to verify corrections.
- Offensive expertise and continuous improvement
- Develop scripts and tools for test automation.
- Maintain awareness of new vulnerabilities and attack techniques.
- Support SOC/CERT teams and administrators in improving defenses.
- Contribute to the industrialization of audit methods and procedures.
- Offensive security: OWASP Top 10, vulnerability exploitation, privilege escalation, and lateral movement.
- Systems and networks: Windows, Linux, Active Directory, TCP/IP, Wi-Fi, Cloud, and complex architectures.
- Pentest tools: Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux, and BloodHound.
- Scripting: Python, PowerShell, Bash, and development of automation tools.
- Methodologies: penetration testing, Red Team, Purple Team, CVSS, and technical reporting.
- Valued certifications: OSCP, OSCE, OSWP, eCPPT, or relevant security audit qualifications.
Project details
- Start: flexible
- Remote: onsite
- Location: Paris, France, FR
- Languages: French
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on collective.work