Germany
Siemens
Sopra Steria
Senior Consultant Offensive Security (m/w/d)
Germany
Hanover, Lower Saxony, Germany
AWSGCP
Automatic translation. Check the original.
Company Description
As one of the leading European management and technology consultancies, we are a true tech player. We see ourselves as thought leaders, think and act strategically, develop customized solutions and precise processes with our clients, and implement innovative technologies. Worldwide, we have over 50.000 tech-savvy and brilliant minds – together, we shape the future of our clients and society.
Our Mindset
Team spirit, open doors, a first-name culture, and lived diversity.
Diversity is an important foundation of our corporate culture. We want to create an inclusive environment that takes into account the diversity of all our 2.700 employees in Germany and Austria and in which you can develop in the best possible way. Because we at Sopra Steria are convinced that your individuality is the key to sustainable corporate success.
We are committed to a sustainable future: Whether with group-wide scholarship and corporate volunteering programs or with projects to promote education, equal opportunities, and digital inclusion – we take responsibility for society. We firmly believe that digital innovations are a key to equality, inclusion, and climate protection.
Are you ready to help shape a digital Europe?
Job Description
In this role, you will perform sophisticated penetration tests in the areas of web, mobile, infrastructure, cloud, API or OT – depending on your profile.
You will plan and implement red teaming and purple teaming engagements and conduct realistic attack simulations.
This also involves using social engineering and evasion techniques to test security mechanisms.
Additionally, you will develop threat scenarios and perform adversary emulation based on current TTPs.
AI-supported methods for vulnerability detection, exploit synthesis, attack automation, and code analysis are also part of your toolkit, which you will continuously develop.
Together with the team, you will build an Offensive Security factory and shape its automation, scripting, and orchestration (CI/CD for Offensive Security).
You will provide consulting on security-relevant architecture and design decisions and contribute your expertise.
Furthermore, you will actively work on the further development of our offensive security portfolio, for example on projects such as the AI OffSec Lab, adversarial AI, or automated scanning pipelines.
Consulting means flexibility: Your project assignment depends on our clients and your project situation – you will work throughout Germany in our offices, at the client's site, and from home.
Legal Notice
Qualifications
You have a successfully completed degree in (business) informatics, mathematics, engineering, or a comparable qualification.
Furthermore, you have already gained several years of experience in the field of penetration testing or offensive security and have successfully applied it.
You possess very good knowledge of common OffSec methods and frameworks such as OWASP, PTES, and MITRE ATT&CK.
Working with tools such as Burp Suite, Metasploit, Cobalt Strike, Empire, BloodHound, Nmap, Nessus, or Kali is familiar to you and part of your daily routine.
Red teaming methods are not only known to you, but ideally, you also have practical experience in this area.
An analytical mindset, independent working style, and a high level of responsibility characterize you.
Good German language skills (from B2 level) as well as English language skills round off your profile.
Knowledge in the field of AI-supported offensive security, for example LLM-supported recon, automation, AI tooling, or prompt exploitation, rounds off your profile.
Experience with cloud security attack paths in Azure, AWS, or GCP is a plus.
Relevant certifications such as OSCP, OSCE3, OSEP, CRTO, OSEE, eCPPT, eWPT/X, or CPSA/CTP are desirable.
Additional Information
- Further education: extensive professional and methodological training including certifications as well as diverse development perspectives within the company.
- Work-life balance: hybrid working within Germany and for a limited period in defined EU countries, family service, corporate fitness, as well as the possibility of a sabbatical.
- Flexible vacation planning: 30 days of vacation and the possibility to individually increase or decrease the annual vacation by up to 5 days.
- SpenditCard: In addition to your salary, you have 50 Euro of tax-free credit available monthly, which you can use flexibly for shops in your area.
- IT equipment: We support you with the provision of necessary additional equipment for optimal location-flexible work.
- Mobility: Company car and company bike via salary conversion as well as subsidies for the Deutschlandticket.
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile
