Support penetration testing activities within the development pipelines for web, mobile applications and APIs
Plan and execute penetration tests in internal environments, infrastructure, cloud, containers and applications
Assist technical teams in remediating vulnerabilities and implementing security controls
Participate in Application Security (AppSec) initiatives throughout the development lifecycle
Support hardening of servers, operating systems, services and frameworks
Participate in incident handling together with the CSIRT team
Investigate threats, reproduce scenarios and support technical remediation efforts
Support Threat Intelligence activities
Plan and execute Red Team exercises
Deploy and operate vulnerability management and security assessment tools
Conduct proof-of-concepts (PoCs) for new tools and technologies
Prepare metrics, KPIs and technical and executive reports
Collaborate with Infrastructure, Development and Security teams

Strong experience in Cybersecurity, particularly in penetration testing, offensive security and application protection
Practical experience performing pentests on networks, web applications, mobile applications and APIs/web services
Proficiency with widely used offensive security and vulnerability management tools such as Burp Suite, Nmap, Metasploit, SQLMap, Nessus and Qualys
Experience in Application Security (AppSec), including SAST, DAST, SCA, API Security and IaC Security
Knowledge of secure development frameworks such as OpenSAMM, BSIMM and Microsoft SDL
Experience with threat modeling and designing secure architectures
Experience in Red Team operations and offensive simulations using frameworks such as MITRE ATT&CK, Cyber Kill Chain and Unified Kill Chain
Solid knowledge of cloud security, particularly within the Microsoft Azure ecosystem
Familiarity with programming and automation, with knowledge of languages such as Python, Java and .NET

Flex Meal Card: Use the Flex Card to pay for meals wherever you prefer
Comprehensive Health and Dental Coverage
Wellhub Wellness Program: Access gyms, studios and fitness activities to support physical and mental well-being
Childcare Allowance to help with childcare expenses
Extended Parental Leave for additional time to care for your family
Home Office Allowance to support remote work-related expenses
Birthday Gift Voucher to celebrate your special day
Commuter/Transportation Allowance for stress-free travel to and from work
Career Development Partnerships: Access training and certification opportunities through partnerships with companies like Google, Microsoft, BSTQ, Amazon and more

Senior Cybersecurity Analyst

Key skills