SENIOR OFFENSIVE SECURITY ENGINEER

Publication Date: Oct 18, 2024
Ref. No: 518977
Location:Bydgoszcz, PL
Eviden, part of the Atos Group, with an annual revenue of circa € 5 billion is a global leader in data-driven, trusted and sustainable digital transformation. As a next generation digital business with worldwide leading positions in digital, cloud, data, advanced computing and security, it brings deep expertise for all industries in more than 47 countries. By uniting unique high-end technologies across the full digital continuum with 47,000 world-class talents, Eviden expands the possibilities of data and technology, now and for generations to come.
We are currently looking for a Senior Offensive Security Engineer.
Are you experienced in the area of penetration testing and red teaming? Do you speak English at least at a B2 level? If you work well in a team and have knowledge of security events, we will be happy to meet you!

REQUIRED SKILLS AND EXPERIENCE

• 5+ years of experience in red teaming or as a pentester
• OSCP or other offensive security certification is a plus
• English at B2 level or better
• Necessary technical and communication skills needed for the responsibilities listed above
• Ability to modify and script around existing tools
• You don’t have to be an expert at exploit development, but we need you to be persistent and resourceful
• You must be eligible for security clearance
• We need candidates to be truly proactive and capable of solving problems with minimal guidance

WHAT YOU SHOULD KNOW

• Online recruitment (via MS Teams)
• 2-step interview
• Work as you want—remotely or onsite
• Work from Monday to Friday during business hours
• Team size: 5 members

• Preparing and executing technical security assessments
• Interfacing with architects and CSOs to constantly shape the assessment scope
• Cooperating with the Blue Team to improve their processes and detection capabilities
• Cooperating with the Threat Intelligence team to create pragmatic and probable test scenarios that resemble real attacks
• Writing comprehensive assessment reports and providing recommendations
• Finding weaknesses in systems, applications, and processes
• Maintaining a comprehensive attack simulation framework
• Preparing technical and process documentation
• Running ad hoc scans, sometimes using custom-built tools, for emerging critical vulnerabilities
• Building and enhancing Red Team wiki and toolset