IT Security Engineer (m/f/d) – Penetration Testing & Red Teaming
You think like an attacker and work like an engineer – in classic pentests, red team engagements and AI system testing, supported by VamiRedteam.
- Full-time
- Professional–Senior
- Remote-first · Bonn
- German C1+
Your responsibilities
- Penetration tests of web applications, APIs, cloud environments, internal networks and Active Directory
- Red team engagements and assumed-breach scenarios, including reporting for management and engineering
- Pentests of AI applications and agents (prompt injection, jailbreaks, tool abuse), rated with CVSS and AIVSS
- Steer and validate agentic pentests with VamiRedteam – human in the loop, every finding with a proof of concept
- Evolve methodology and playbooks along the OWASP standards (WSTG, ASVS)
Your profile
- Several years of experience in penetration testing or red teaming
- In-depth knowledge of web and API security, Active Directory and common attack techniques (MITRE ATT&CK)
- Confident with tools such as Burp Suite, BloodHound, Nuclei or Metasploit and scripting in Python or PowerShell
- Excellent German (at least C1) and good English
- A plus: OSCP, OSEP, OSWE, CRTO or comparable certifications
- Penetration Testing
- Red Teaming
- Web & API
- Active Directory
- AI Pentesting
- OWASP WSTG
- OSCP