Plan and execute AI-assisted red team engagements across web applications, APIs, cloud workloads and infrastructure, and deliver prioritized technical reports and executive summaries.
Provide clear remediation guidance and validate fixes, prioritizing critical and high findings.
Configure, tune and maintain offensive tooling and develop automation playbooks that reduce manual triage and false positives.
Integrate recurring security checks into CI/CD pipelines and platform processes to enable continuous testing and attack-surface reduction.
Run remediation workshops and knowledge transfers, and produce reusable runbooks for product and platform teams.
Coordinate triage and handoff with SOC, IT Ops, product teams and central IT Security, and support governance and compliance mapping (OWASP, API Security Top 10, CVSS).

Proven hands on experience in red team or offensive security testing across web apps, APIs, and cloud environments.
Solid understanding of OWASP Top 10, API Security Top 10, CVSS, secure SDLC, threat modeling.
Experience with AI assisted offensive tooling or demonstrable integration of ML/NLP techniques into offensive workflows (e.g., Mythos, GPT Cyber).
Strong practical experience with Burp Suite, OWASP ZAP, Nmap, Metasploit, Nessus/OpenVAS, and Kali Linux.
Solid cloud security knowledge, particularly AWS, and experience with Kubernetes and container security.
Scripting and automation skills (Python, Bash) and experience integrating security checks in Git/GitLab CI or equivalent CI systems.
Excellent written and verbal communication skills in English
Experience with SIEM/logging platforms, OpenSearch, Grafana, or production monitoring stacks and prior experience in financial services or regulated environments are a plus

DKB Code Factory GmbH

Open Positions (1)