Randstad Digital specializes in recruiting middle and senior-level positions. Our client is a multinational company seeking a Pentester for Lisbon.
Responsabilidades chave
1. Execute penetration testing on web applications and services to identify vulnerabilities.
2. Perform manual and automated code reviews to detect significant security flaws.
3. Assist technical teams in resolving identified security issues and vulnerabilities.
4. Define key indicators to measure the effectiveness of security improvements.
5. Develop and maintain security testing methodologies aligned with industry standards such as OWASP and NIST.
6. Integrate security testing into CI/CD pipelines to detect vulnerabilities early.
7. Create reusable test cases to ensure consistent security checks across applications.
8. Evaluate vulnerabilities using security benchmarks like OWASP Top 10, NIST, and CIS Controls.
9. Ensure testing complies with relevant legal and industry regulations (e.g., PCI DSS, GDPR, HIPAA, SOC 2).
10. Utilize assessment frameworks (PTES, MITRE ATT&CK) and scoring systems (CVSS) for evaluation.
11. Incorporate security testing throughout the software development lifecycle following secure SDLC principles.
12. Recommend secure design architectures, including cryptography and infrastructure considerations.
13. Conduct knowledge-sharing sessions on security best practices and common pitfalls.
14. Collaborate with developers to identify automation test cases.
15. Work with the QA team to develop comprehensive testing strategies.
16. Analyze test results and identify root causes of issues.
17. Provide detailed reports on testing progress, failures, and improvements.
Competências
- At least four years of professional experience in security testing of software.
- Proficiency with security testing tools such as Burp Suite, OWASP ZAP, and scripting languages like Python, Bash, PowerShell; familiarity with Metasploit and static analysis tools like Checkmarx.
- Experience with CI tools such as Gitlab, Jenkins, and GitHub Actions.
- Strong problem-solving skills and attention to detail.
- Excellent interpersonal and teamwork abilities.
- Fluent in English (B2 level or higher).
- CREST Registered certification is required.
Principais benefícios
- Opportunity to work in a stimulating environment with agile teams and innovative projects.
- Join a well-established and stable organization.
- Ongoing development and upskilling opportunities.
#J-18808-Ljbffr