TasksYou will conduct penetration testing of web applications, APIs and microservices architectures aligned with standards such as from OWASPYou will perform advanced security assessments of cloud environments (AWS, Azure, GCP), hybrid and on-prem infrastructureYou will perform security validation of Infrastructure as Code (IaC) implementations, identifying misconfigurations and compliance gapsYou will conduct mobile application security assessments for Android and iOS platformsYou will author detailed technical reports documenting vulnerabilities, risk analysis, and remediation recommendationsYou will present findings to stakeholders and technical teamsYou will mentor colleagues and contribute to team skill developmentYou will handle the development of testing methodologies and processes through automation and innovationQualificationsProven track record in web application security testing with Burp Suite proficiencyGood understanding of IT architectures and security conceptsSecurity assessment and testing certifications (e.g.: OSCP, OSWE, WAPTX) or cloud security certsExperience with Infrastructure as Code (Terraform, Ansible) Experience writing clear, actionable reportsDemonstrated experience in cloud security for at least one major platform (AWS/Azure/GCP)Things to know before departure: Start: by arrangement - always on the 1st and 15th of the monthWorking hours: full-time ( 40h); 27 vacation daysEmployment contract: UnlimitedLine of work: ConsultingLanguage skills: Fluency in written and spoken English; German would be a plusFlexibility & willingness to travelOther: a valid work permit Show more Show less