Job
- Level
- Senior
- Location
- Garching bei München
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you independently conduct penetration tests, identify vulnerabilities, and simulate realistic attacks while providing technical consulting on cyber security architectures.
Job Technologies
Your role in the team
- Offensive Security: You independently conduct penetration tests, identify vulnerabilities in complex IT landscapes, and analyze attack vectors across network, system, and application layers.
- Realistic Attack Simulation: You test the security chains of a company as part of Advanced Cyber Attacks and Red Teaming Assessments.
- Technical Consulting: You advise our clients independently of the manufacturer on modern security architectures, attack scenarios, and best practices, and conduct audits / whitebox reviews with a technical focus.
- Analysis & Reporting: You prepare technical results in a way that is appropriate for the target audience, make complex attacks understandable, and derive concrete, actionable recommendations for our clients.
- Research & Development: You actively contribute to the development of new attack techniques, tools, automations, and infrastructure.
- Shared expertise: You will become part of a highly qualified team where everyone brings their areas of expertise and contributes to the success of the entire team.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Technical expertise: In-depth knowledge of Active Directory, Entra ID, enterprise networks, and/or cloud environments (AWS, Azure, etc.).
- Mindset: You have a quick grasp of concepts and bring new perspectives to complex security challenges ('think outside the box').
- Communication: You enjoy consulting, clearly articulate technical content, and can effectively communicate it to both technical teams and management.
- Working style: You work in a structured, solution-oriented, and analytical manner, take responsibility for your projects, and independently deliver high-quality results.
- Language skills: You have very good spoken and written proficiency in German and English.
- Travel readiness: You have a willingness to travel of around 30%. This also includes occasional international trips.
- Nice to have: Certifications such as OSCP, OSWA/OSWE, CRTO, SANS, or comparable qualifications.
Experience
- Experience: Several years of professional experience in IT security with a focus on penetration testing and/or red teaming.
- OT/ICS experience: Practical experience in planning and conducting assessments in critical OT/ICS environments as well as in risk assessment and deriving pragmatic measures to enhance cyber resilience.
- Development Skills: Programming experience, ideally in Python, Go, Java, or C#.
This text has been machine translated. Show original
What we offer
- A varied and versatile job in one of the most exciting fields from our perspective.
- And that in a company where every opinion is truly heard and valued - from intern to management.
- This job gives us not only a salary but also personal satisfaction because we really make a difference and make the world a bit safer.
- Flexible working hours and the possibility of remote work help you to respond to unforeseen events in everyday life with composure.
- We foster an open, trust-based corporate culture (check out Kununu) and value independent work, naturally also, but not only, in the home office.
- Finally, we have a modern office in Garching with a stunning Alpine view, where we enjoy having lunch together and exchanging ideas with our security auditors, incident responders, awareness trainers, and multimedia designers.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics You Will Work On
Job Locations
About Your Employer
Hvs-consulting Ag
HvS-Consulting AG, based in Garching near Munich, is an experienced company focused on Cyber Security. It offers tailored consulting services in the areas of information security and IT security management, supporting both international corporations and small to medium-sized enterprises with over 20 years of experience.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Consulting