Penetration Tester

Mission

We are looking for an experienced Penetration Tester, specialized in infrastructure security testing and web applications, able to operate in diverse environments including high security and classified environments. The resource will be responsible for planning and performing penetration testing activities aimed at identifying vulnerabilities and risks, with the aim of supporting customers in improving their security posture.
The activities will be carried out mainly on-site at our customers; it is also required the willingness to operate in classified environments, characterized by more restrictive testing methods and requiring special attention during the preparation and execution phase.

Key Accountabilities

• Conduct penetration tests on network infrastructures and web applications, adopting recognized methodologies (e.g. OWASP, PTES, OSSTMM);
• Analyse and assess identified vulnerabilities, classifying risks and proposing appropriate mitigation measures;
• Prepare comprehensive technical reports, aimed at both technical and non-technical stakeholders;
• Collaborate with customer IT and security teams to facilitate remediation activities;
• Adapt the testing methods to the specificities and restrictions of classified environments or with high security requirements;
• Keep up-to-date expertise on new attack techniques, tools and countermeasures;
• Use advanced penetration testing and vulnerability assessment tools (e.g. Burp Suite, Metasploit, Nessus, Nmap);
• Support safety training and awareness activities.

Education

Qualifications

• Minimum 3 years of experience in similar roles;
• Consolidated experience in web and infrastructure penetration testing;
• In-depth knowledge of network protocols, Windows and Linux operating systems, Active Directory environments and application security;
• Ability to operate in environments with high security constraints, including classified environments;
• Excellent analytical, problem solving and technical writing skills;
• Excellent communicative and relational skills;
• Willingness to carry out on-site activities at customers, including in classified environments;
• Knowledge of English at least at B2 level.

Preferential requirements:

• Recognized certifications in the field of penetration testing and cybersecurity, such as CEH, OSCP or equivalent;
• Experience in scripting and automation (Python, Bash, PowerShell);
• Familiarity with cloud infrastructures and related security aspects;
• Knowledge of security regulations and standards (e.g. GDPR, ISO 27001, NIST).

Competencies