Offensive Security Specialist (m/f/d)

Responsibilities

Conducting offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems; Planning, executing, and leading advanced penetration tests for custom and third-party web applications, complex enterprise applications, and cloud-native and hybrid architecture; Documenting findings in high-quality technical reports, including clear risk ratings, business impact analysis, and actionable remediation recommendations; Presenting results to technical and non-technical stakeholders, including engineering teams, management, and customers; Advising on risk mitigation strategies, secure design principles, and defensive improvements

Requirements

Successfully completed university degree in (Business) Informatics, Computer Science, or a comparable IT-related field or equivalent professional experience; Hands-on experience in web application penetration testing; Hands-on experience in infrastructure and network penetration testing; Hands-on experience in security testing of complex, business-critical applications; Strong understanding of Windows and Linux client/server environments; Practical experience with cloud platforms, including identity, networking, and cloud-native services; In-depth knowledge and hands-on usage of offensive security tools; Knowledge of secure software development lifecycle (SSDLC) and common vulnerability classes (e.g., OWASP Top 10); Experience with Red Teaming, adversary simulation, and attack-chain methodology; Familiarity with source code review and static/dynamic application security testing

Nice to have

Experience working in industrial or chemical company environments; Programming and scripting skills; Knowledge of OT / ICS security

Benefits

Performance-based remuneration; occupational health benefits; hybrid and flexible working environments; attractive career paths; high-quality development programs