Security Engineer - Pentester

Join Scaleway and shape the sovereign cloud of tomorrow. Our growth is driving us to strengthen our Trust & Security Operations team to expand our internal pentesting capabilities and strengthen the security posture of our cloud products. Your mission will be to simulate realistic and controlled cyberattacks across our infrastructure and applications in order to identify vulnerabilities, evaluate associated risks, and continuously improve the security of Scaleway's products and services.

Responsibilities

Conduct web, API, network, and infrastructure penetration tests on Scaleway products and internal systems; Simulate realistic cyberattack scenarios to identify vulnerabilities and weaknesses; Participate in Red Team or adversarial simulation exercises, including social engineering campaigns; Assess and prioritize vulnerabilities based on their risk and potential impact; Write clear and structured security reports and communicate findings to technical and non-technical stakeholders; Collaborate with product and engineering teams to support remediation and security improvements; Contribute to the design and implementation of the internal pentesting tool stack; Stay up to date with emerging vulnerabilities, exploits, and offensive security techniques; Support the continuous security testing workflow across Scaleway products

Requirements

Hands-on experience with penetration testing (web, APIs, networks, infrastructures); Good knowledge of OWASP Top 10, MITRE ATT&CK, CVE and common exploitation techniques; Experience with security tools such as Nmap, Metasploit, Burp Suite or OWASP ZAP; Solid scripting or development skills (Python, Bash, SQL, PHP or similar); Understanding of vulnerability exploitation techniques such as XSS, SQL injection, buffer overflow or reverse engineering; Strong analytical mindset and curiosity; Creativity and “think outside the box” approach to problem solving; High level of ethics and integrity in offensive security work; Ability to write clear and structured reports; Team spirit and collaboration mindset

Benefits

Hybrid work: up to 3 days of remote work per week; Offices: spacious, dynamic workspaces with bold design, conveniently located near public transport; most offices feature outdoor spaces (terraces) and bike parking facilities; Dining: healthy meal service at headquarters, breakfast across all sites year-round, Swile card for lunches for regional sites; Well-being commitments: gym access, daycare places, discounted services for caring services; International environment: dozens of nationalities, English widely spoken; Career & Mobility: internal mobility, opportunities to transition to other entities within Iliad Group