Security Testing Specialist

💻 Passionate about code and security? We are looking for a Security Testing Specialist based in Luxembourg!

🔑 Key Responsibilities (non-exhaustive list):

• Perform white-box security testing.
• Analyse project and internal documentation, source code, and other relevant information.
• Collaborate with project teams and technical staff, ensuring high security standards.
• Participate in technical meetings and contribute to the continuous improvement of security processes.
• Assess findings during the process and report critical issues immediately.
• Prepare reports summarizing technical security analysis and share them according to procedures.
• Provide technical input on challenges, system maintenance, or DevSecOps activities based on experience and procedures.

🔒 Requirements:

Technical Skills:

• Good general ICT knowledge (e.g. networking, operating system, firewalls, web application servers, programming and code quality tools, virtualisation, runtimes).
• Good knowledge of development practices and knowledge of secure coding.
• Experience with web application security, static analysis, input validation, and data handling.
• Good knowledge of vulnerability and security analysis tools and platforms such as Kali Linux, Burp Suite, AppScan.
• Good knowledge of security and vulnerability management practices, preferably including relevant framework, best practices and standards (e.g. NIST SP800, ISO 27001, OWASP, hardening guidelines).
• Understanding/basic knowledge of cloud services.

Qualifications & Experience:

• Bachelor’s degree.
• At least 3 years of experience as a developer and/or in roles with technical security responsibilities.
• Experience handling sensitive information in technical environments.
• Experience in analysis and in redaction of documents for technical and non-technical people (advantageous if in a context of security)
• Excellent command of English (C1) and French (C1 or B2).
• Certification according to CEH, or equivalent certification.

🌍 Location:

• Luxembourg (Onsite/Hybrid)