Penetration Tester
Particle Measuring Systems ·
Do you want to be part of a business that genuinely values entrepreneurialism, innovation and individual accountability? We focus on our customers and are proud of the difference our technology makes. We partner with some of the biggest manufacturing companies in the world and our technical innovations are used to enhance well-known brands across multiple industries.
Do you have a true passion for the Pharmaceutical or Electronic industries and for delivering the best solutions for our customers? We're looking for a Penetration Tester that will take care of the preparation and execution of the tests necessary to verify the compliance of the software related cyber security.
In addition he/ she has to prepare the documentation of each test delivered. What you will do Vulnerability assessments: perform the assessment Penetration testing: manual and automated test Threat Modeling: conduct threat modeling to identify potential security threats, assess risks, and define appropriate mitigation strategies.
SAST/DAST analysis: to analysis, validate and triage and with developers and cyber security team the findings Vulnerability validation and security reporting: to ensure compliance with cybersecurity requirements Planning and implementation of testing strategies: Define detailed plans to test the various functionalities of the software for cyber security side Identification and documentation of malfunctions: Detect bugs and issues, documenting them accurately to facilitate their resolution Execution of automated and manual tests: Use specific tools to automate tests or perform manual tests when necessary Preparation of test reports: Provide detailed documentation on the tests performed and the results obtained Key Requirements Security Testing and Vulnerability Assessment: Experience in identifying, validating and documenting software vulnerabilities and security risks.
Manual and Tool-Based Penetration Testing: Ability to perform security assessments using both manual techniques and industry-standard penetration testing tools. Static and Dynamic Application Security Testing (SAST/DAST): Experience using source code analysis and dynamic testing methodologies to identify security vulnerabilities throughout the software development lifecycle.
Vulnerability Risk Assessment: Knowledge of CVSS (Common Vulnerability Scoring System) methodology for vulnerability classification, prioritization and risk evaluation. Secure Development Lifecycle: Understanding of security integration within Agile, DevSecOps and CI/CD environments.
Security Reporting: Ability to produce clear technical reports detailing findings, risk levels, remediation recommendations and validation results. Nice to Have Knowledge of public security advisories, CVE databases and vulnerability disclosure processes.
Experience reviewing and understanding public CTF (Capture The Flag) writeups and security research publications. Familiarity with the MITRE ATT