Penetration Tester

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7bi8so

ppDo you want to be part of a business that genuinely values bentrepreneurialism /b, binnovation /b and bindividual accountability /b? We bfocus on our customers /b and are proud of the difference our technology makes. We partner with some of the biggest manufacturing companies in the world and our technical innovations are used to enhance well‑known brands across multiple industries. /ppDo you have a true passion for the Pharmaceutical or Electronic industries and for delivering the best solutions for our customers? We’re looking for a Penetration Tester that will take care of the preparation and execution of the tests necessary to verify the compliance of the software related cyber security. In addition he/ she has to prepare the documentation of each test delivered. /ph3What You Will Do /h3ulliVulnerability assessments: perform the assessment /liliPenetration testing: manual and automated test /liliThreat Modeling: conduct threat modeling to identify potential security threats, assess risks, and define appropriate mitigation strategies. /liliSAST/DAST analysis: to analysis, validate and triage and with developers and cyber security team the findings /liliVulnerability validation and security reporting: to ensure compliance with cybersecurity requirements. /liliPlanning and implementation of testing strategies: Define detailed plans to test the various functionalities of the software for cyber security side /liliIdentification and documentation of malfunctions: Detect bugs and issues, documenting them accurately to facilitate their resolution /liliExecution of automated and manual tests: Use specific tools to automate tests or perform manual tests when necessary. /liliPreparation of test reports: Provide detailed documentation on the tests performed and the results obtained /li /ulh3Required Technical Skills /h3ulliSecurity Testing and Vulnerability Assessment: Experience in identifying, validating and documenting software vulnerabilities and security risks. /liliManual and Tool-Based Penetration Testing:



Ability to perform security assessments using both manual techniques and industry‑standard penetration testing tools. /liliStatic and Dynamic Application Security Testing (SAST/DAST): Experience using source code analysis and dynamic testing methodologies to identify security vulnerabilities throughout the software development lifecycle. /liliVulnerability Risk Assessment: Knowledge of CVSS (Common Vulnerability Scoring System) methodology for vulnerability classification, prioritization and risk evaluation. /liliSecure Development Lifecycle: Understanding of security integration within Agile, DevSecOps and CI/CD environments. /liliSecurity Reporting: Ability to produce clear technical reports detailing findings, risk levels, remediation recommendations and validation results. /li /ulh3Nice To Have /h3ulliKnowledge of public security advisories, CVE databases and vulnerability disclosure processes. /liliExperience reviewing and understanding public CTF (Capture The Flag) writeups and security research publications. /liliFamiliarity with the MITRE ATTCK framework and adversarial techniques. /liliSecurity certifications such as OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker), GPEN (GIAC Penetration Tester) or equivalent certifications. /liliExperience with common security testing tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit or similar. /liliKnowledge of programming languages: Familiarity with languages such as Java, Python, or C# facilitates understanding code and creating automated test scripts. /liliKnowledge of development methodologies:



Understanding of Agile and DevSecOps frameworks to effectively integrate into modern development processes. Knowing of Scrum method is a plus, to integrates their tests into CI/CD (Continuous Integration/Delivery) processes, contributing in real‑time to code quality. /liliKnowledge of Operating Systems: Microsoft, Linux and RTOS as well as industrial automation programming languages SCADA and PLC is considered a plus. /liliIn addition to these, skills in scripting, use of version control systems like Git, and familiarity with virtualization environments are highly valued. /liliDegrees in Electrical, Computer Science, Biomedical, Telecommunications and Automation Engineering may be taken into consideration. /liliISTQB (International Software Testing Qualifications Board) certification is a plus. /li /ulpWe offer permanent contract with a competitive salary package in the range of €40,000 – €50,000 gross annual salary, based on experience and seniority, along with a diverse range of benefits designed to support our employees' physical and emotional well‑being. /ppJoin us and be yourself. Inclusion is our ambition! /ppParticle Measuring Systems is an equal opportunity employer, offering a safe and inclusive work environment, based on mutual respect and the appreciation of uniqueness, guaranteeing equal employment opportunities to all qualified candidates to unleash their full potential. /ppParticle Measuring Systems (PMS) specializes in viable and nonviable particle counters and particle counting solutions that measure and monitor contamination levels in clean and controlled environments. Since 1972, our knowledgeable and experienced team has been developing innovative technologies to advance the cleanroom monitoring industry. Led by our technology which provides accurate and reliable results and information for our clients, Particle Measuring Systems is one of the world’s leading companies and manufacturers for particle counting instruments, and molecular and microbial monitoring. /p /p #J-18808-Ljbffr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7bi8so