vom 26.01.2026
Execution of penetration tests against web applications, APIs, networks and cloud environments utilizing black-box, gray-box and white-box methodologies. Identification and documentation of vulnerabilities, including OWASP Top 10 risks, misconfiguration and privilege escalation paths. Creation of detailed penetration test reports containing technical risk ratings, documented attack paths and remediation recommendations. Verification of technical remedidation efforts through structured re-testing procedures. Attack Surface Disocvery and Monitoring. Discovery and inventory of external attack surface assets, including the identification of unmanaged assets and exposed APIs. Analysis of attack surface changes and documentation of exposure trends over time. Prioritization of technical findings based on exploitability and threat intelligence data.
Requirements: Provision of technical recommendations to engineering and DevOps teams regarding remedidation strategies. Execution of threat modeling and technical security architecture reviews. Development of custom scripts and automation tools for offensive security and Attack Surface Management (ASM) processes.
Einsatzort: D6 Darmstadt / remote. Start: März 2026. Laufzeit: 9 Monate++
Kontaktadresse
|
