Senior Penetration Tester

Stack

Responsibilities

• ▹Plan and lead pentest campaigns (web, mobile, systems)
• ▹Define attack strategies and assign roles during the operational phase
• ▹Perform intrusion tests in an ethical and regulatory-compliant manner
• ▹Take part in Red Team missions (analysis, execution, reporting)
• ▹Mentor junior colleagues and support their skill development
• ▹Identify vulnerabilities and propose tailored remediation plans
• ▹Develop and maintain internal tools (scripts, APIs, web services)
• ▹Contribute to R&D work (technology watch, tooling, methodologies)
• ▹Document actions performed and produce technical and executive reports
• ▹Take part in defining the security roadmap with internal clients
• ▹Oversee the legal and contractual framework of test campaigns

Requirements

• ▹Bac+3 to Bac+5 in cybersecurity or IT
• ▹Minimum 5 years of experience in offensive security (pentest, Red Team, technical audits)
• ▹Proven technical leadership and prior mentoring responsibilities
• ▹Experience developing pentest programs
• ▹Good aptitude for white-box code auditing / pentesting
• ▹Domain: languages/scripting - Python, Java, Shell, .NET, PowerShell (level 4/5); network and system security (level 4/5); intrusion testing - Web, AD/Windows, thick client, Android apps, binary exploitation, Kubernetes, Azure, complex environments; white-box code audit; reverse engineering - binary and firmware analysis, advanced exploitation; automation of the pentest cycle (scanning, exploitation, reporting)
• ▹Professional English (spoken and written) - C1 level required

Nice to have

• ▹Active Red Team experience

Soft skills

What we offer

• ▹RTT, meal card, health insurance (mutuelle)
• ▹Supplementary insurance (prévoyance), profit-sharing, retirement savings plan, works council (CSE)
• ▹Partial transport cost coverage, remote work possible

About the company

Abicom's Clermont-Ferrand office is part of the OCI Group, a national 360° expert in IT and digital services. The client is a manufacturing group and materials science pioneer, whose offensive cybersecurity team this role will reinforce.