Together with the Cyber Security & Network Operations team, you will be responsible for pentesting.
Tasks
Together with our vendors, be responsible for the correct and timely execution of pen tests on our applications and systems.
Mainly coordinate the planning, refine test scopes, follow up and validate the effective tests and follow up on the remediation of any findings.
Using existing subject matter expertise to assess risks and assess and adjust the quality of our vendors' services.
Reporting on results and risks to a broad group of stakeholders within the organization.
Ideal Profile
You have broad knowledge and experience in security testing.
You have at least 3 years of work experience within IT security (With a minimum of 3 years of experience, specifically pentesting!)
You are a born planner and can accurately analyze and structure information.
You have a strong dose of entrepreneurship and a hands-on mentality.
Test coordination experience or experience managing people in general à must
Strong in test planning and flexibly responding to it
Ability to assess workload in consultation with testers
Strong communication skills, able to clearly communicate test results
You communicate fluently in Dutch and English.
Technical background
General knowledge of web applications
General knowledge of web services / API testing (SOAP , Rest , WSDL , endpoints , server ports , jmeter , soap ui , ...can understand)
Ability to interpret infrastructure and architecture maps
Knowledge of computer networks
Knowledge of Jira , teams , confluence
Familiarity with banking sector is a plus
Familiar with security vulnerabilities
Ability to understand and interpret security vulnerabilities
Able to independently retest vulnerabilities of limited complexity level
Ideally familiar with OWASP , CVEs , Risk determination security vulnerabilities (Impact , likelihood)