The posting
Responsibilities
- Perform penetration tests in black, grey, and white box modes on web applications, APIs, and administration portals.
- Conduct internal and external network infrastructure assessments focusing on segmentation, filtering, and protocol vulnerabilities.
- Execute security tests on Windows and Active Directory environments, including Kerberos, GPO, ACL, and lateral movement analysis.
- Analyze technical architectures and data flows to identify attack surfaces and critical assets.
- Document vulnerabilities and draft technical reports with detailed reproduction steps and remediation recommendations.
- Present findings to technical teams and project managers to assist in risk management.
- Contribute to internal knowledge sharing, including methodologies, check-lists, and tooling improvements.
Requirements
- You have 3+ years of experience in offensive security with a focus on web application and API testing using OWASP methodologies.
- You bring 3+ years of experience in network security and infrastructure protocols including TCP/IP, DNS, HTTP/S, and SMB.
- You possess practical knowledge of Windows and Active Directory security, specifically regarding NTLM, Kerberos, and PowerShell.
- You're proficient with security tooling such as Kali Linux, Burp Suite, Nmap, and Metasploit.
- You have a solid understanding of modern authentication protocols like OAuth 2.0, OIDC, SAML, and JWT.
- You possess strong technical writing skills and the ability to work collaboratively with senior experts.
- You have active knowledge of French, Dutch, and English.
Nice to Haves
- Certifications such as OSCP, BSCP, or CRTP.
- Experience with cloud environments like Azure, AWS, or GCP.
- Knowledge of containers, Kubernetes, and CI/CD security.
- Experience in mobile application security testing.



