Senior Penetration Tester for IT Project in Public Sector

Project overview

For a project in the public sector, an experienced Senior Penetration Tester is sought. The focus is on conducting penetration tests and integrating IT security into modern development and operational processes (CI/CD, Cloud, Automation).

The assignment is predominantly remote, with occasional on-site appointments in Nuremberg.

Responsibilities

• Conducting penetration tests for in-house developed and purchased software solutions
• Identification, analysis, and assessment of security vulnerabilities (Web, APIs, Backend Systems)
• Support in automating individual steps in the pentesting process
• Performing security analyses and static code reviews
• Integration of IT security measures into CI/CD pipelines and automation processes
• Implementation of security best practices and system hardening (e.g., according to CIS Benchmarks)
• Participation in threat modeling and security concepts

Requirements

Ideally:

Framework Conditions:

If you are currently available and interested in collaboration in the public sector, we look forward to your response.

Please send us your current profile including your hourly rate, availability, and information on security clearance (if available).

Best regards

Xcellent Talents

• 5+ years of experience in penetration testing and/or red teaming
• Profound experience in software development (ideally Java / Spring Boot)
• Very good knowledge in source code analysis (static code analysis)
• Experience in automating security tests and processes
• Knowledge of CI/CD tools and GitOps (e.g., ArgoCD, Jenkins and Tekton)
• Experience with Infrastructure-as-Code (e.g., Terraform / OpenTofu, Ansible)
• Profound knowledge in cloud technologies and containerized environments (Kubernetes, Docker)
• Experience with DevOps practices and agile methodologies
• Knowledge in threat modeling and security analyses
• Very good German language skills (min. C1)
• Experience in the public sector
• Knowledge of Oracle databases
• Experience with security standards and hardening (e.g., CIS Benchmarks)
• Project start: from immediate effect
• Duration: 1 year with option for extension
• Utilization: 100%
• Location: predominantly remote
• Occasional on-site appointments in Nuremberg for onboarding and team meetings
• SÜ2 or willingness for security clearance required

Project details

• Start: ab sofort
• Duration: 12 Monate
• Remote: hybrid
• Location: Nürnberg, Deutschland, DE
• Languages: German