Pentester / Ethical Hacker (Red Team)

You test the security of end clients' information systems under real-world conditions. You identify, exploit and document vulnerabilities, then help teams fix them. Depending on your seniority, you progress from classic penetration testing to full Red Team operations.

Responsibilities

Perform penetration tests: web, API, mobile, infrastructure, Active Directory, cloud
Conduct configuration and code audits (application security review)
Run Red Team operations: social engineering, phishing, physical access, persistence, lateral movement
Exploit and chain vulnerabilities to demonstrate real business impact
Write clear reports: executive summary, technical details, prioritized recommendations
Present findings to technical teams and leadership
Support remediation and perform retests
Develop internal tools and scripts (Python, PowerShell, Bash)
Contribute to pre-sales: scope definition, estimation, proposal writing
Maintain continuous watch on vulnerabilities and attack techniques (CVEs, TTPs)

Must-have

3+ years in pentesting or Red Team (consulting or in-house)
Strong command of methodologies: OWASP (Top 10, ASVS), PTES, MITRE ATT&CK
Solid skills in web / API application testing and/or Active Directory attacks
Proficiency with tools: Burp Suite, Nmap, Metasploit, BloodHound, Cobalt Strike or equivalent
Excellent report-writing skills

Nice-to-have

Certifications: OSCP, OSEP, OSWE, CRTO, GPEN, GXPN, PNPT
Cloud exploitation (Azure, AWS) and containers (Kubernetes)
Exploit development, EDR evasion, red team infrastructure
Track record: published CVEs, CTFs, bug bounty, conference talks
Knowledge of the Belgian framework: CCB, CyFun, TIBER-BE (financial sector)