- Company Name
- Thales Cybersecurity Services
- Job Title
- Penetration Tester
- Job Description
-
**Job Title**
Penetration Tester
**Role Summary**
Conduct comprehensive offensive security assessments—including network, infrastructure, and application penetration testing, red team simulations, and targeted adversarial attacks. Deliver detailed technical and executive reports, provide actionable remediation guidance, mentor junior testers, and contribute to continuous improvement and research initiatives within a collaborative security team.
**Expectations**
- Perform external, internal, and remote penetration tests, OSINT, spear‑phishing, and other simulation techniques.
- Produce clear, actionable technical and executive‑level findings and remediation plans.
- Mentor junior staff and share knowledge to enhance team capabilities.
- Stay current on emerging attack vectors, vulnerabilities, and exploit techniques.
- Participate in research and responsible disclosure within the cybersecurity community.
**Key Responsibilities**
- Execute full‑cycle penetration testing on diverse environments (critical infrastructure, advanced technology systems).
- Use offensive tools (Burp Suite, Metasploit, Cobalt Strike, Nmap, netexec, BloodHound) to identify and exploit vulnerabilities.
- Develop and maintain testing methodologies, frameworks, and best‑practice documentation.
- Collaborate with stakeholders to translate findings into strategic risk mitigation strategies.
- Engage in internal R&D projects and contribute to knowledge‑sharing initiatives.
**Required Skills**
- Minimum 2 years of professional penetration testing or red‑team experience.
- Deep technical knowledge of operating systems, networks, and application‑layer attacks.
- Proficiency in scripting languages: Python, Rust, Bash, PowerShell, or similar.
- Strong analytical, problem‑solving, and report‑writing abilities.
- Familiarity with threat‑intelligence and adversarial simulation techniques (OSINT, social engineering).
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
- Preferred certifications: OSCP, OSEP, OSWP, OSCE, OSED, GPEN, or equivalent.
- Demonstrated participation in CTF competitions, FLARE‑ON, or SANS training is highly valued.
- Professional working proficiency in English; bilingual proficiency in French or Dutch is a plus.