Security Testing Specialist (TSEC) x2

Technical Annex – Security Testing Specialist (TSEC) 2 open Vacancies

1. Purpose and Scop

eDefines scope, responsibilities, and requirements for the Security Testing Specialist (TSEC) under framework agreement [ITS24-TEST-R2-BUSOL-DESIQUAL-QCA-CS001]

.
2. Role Overvi

• ewProfile Title: Security Testing Specialist (TSE
• C)Seniority: Seni
• orLocation: Luxembou
• rgOnsite: Hybrid – minimum 2 days/week on-si
• teStart Date: Tentative Q2 2025 (defined per service reques
• t)Working Hours: 8h/day, 5d/we
• ekLanguage: English (required), French (asse
• t)Rate: Upon experience market ra

te
3. Responsibilit

• iesPlan and conduct security assessments and penetration te
• stsExecute/automate vulnerability scans and repo
• rtsAnalyze risks and perform root-cause analy
• sisIdentify security flaws early in developm
• entGenerate test plans, scripts, and final repo
• rtsSupport security architecture and compliance test

ing
4. Technical Skills and T

oolsMandat

• ory:Penetration tools: Burp Suite, OWASP ZAP, Metasp
• loitScripting: Python, Bash, PowerS
• hellScanners: Nessus, Qualys, Ope
• nVASOS: Linux, Win
• dowsWeb/API Security: REST, SOAP, JSON,
• XMLKnowledge: OWASP Top 10, Secure SDLC, DevSe

cOps
Desir

• able:Cloud: Azure, AWS
• , GCPSIEM/log analysis exper
• ienceCompliance: ISO 27001, NIST

, CIS
5. Qualifications and Expe

• rience5+ years in cybersecurity t
• estingUniversity degree in IT/engineering or equi
• valentCertifications: OSCP, CEH, GIAC, CISSP (a
• plus)Strong documentation/reporting skills (En
• glish)Experience in EU Institutions or public sector IT is

a plus
6. Contractual Conditions (from RFO Executio

• n Form)Delivery Model: Time &
• ; MeansLocation: Brussels (
• Hybrid)Engagement: Full-time (40
• h/week)Service Mode: Predefined Service Requests under fr
• ameworkMonitoring: Quality Control & SLA ind

icators
7. Deli

• verablesSecurity test strategies and te
• st casesPenetration testing
• reportsSecurity gap analysis and remediatio
• n adviceScripts for automation/log
• analysisDocumentation aligned with EU IT s

tandards
8. Evaluatio

• n MetricsTimeliness/completeness of del
• iverablesAccuracy of vulnerability class
• ificationDocumentatio
• n qualityCompliance with security
• standardsTeam collaboration and respo