Responsibilities
The Security Testing Specialist will be responsible for:
Planning and conducting security assessments and penetration tests.
Executing and automating vulnerability scans and reporting.
Analyzing risks and performing root-cause analysis for detected vulnerabilities.
Supporting the secure development lifecycle by identifying security flaws early.
Generating test plans, scripts, and final reports with clear, actionable findings.
Contributing to security architecture evaluations and compliance testing.
Technical Skills and Tools mandatory:
Penetration testing tools: Burp Suite, OWASP ZAP, Metasploit, etc.
Scripting: Python, Bash, PowerShell Vulnerability scanners: Nessus, Qualys, OpenVAS OS knowledge: Linux and Windows
Web and API security: REST, SOAP, JSON, XML
Understanding of OWASP Top 10, Secure SDLC, DevSecOps Desirable:
Knowledge of cloud security controls (Azure, AWS, GCP)
Experience with SIEMs and log analysis Familiarity with compliance frameworks: ISO 27001, NIST, CIS
Qualifications And Experience
Minimum 5 years of experience in cybersecurity testing
University degree in IT, engineering, or equivalent experience Certifications such as OSCP, CEH, GIAC, CISSP are advantageous Strong reporting and documentation skills in English
Experience in European Institutions or large public-sector IT environments is a plus
Seniority Level: Senior
Location: Luxembourg
Requirements: Hybrid model – at least 2 days per week on-site.