Penetration Tester (m/f/d)

What to expect

As a penetration tester, you carry out simulated cyberattacks on internal and external systems, applications or networks. You use a wide range of tools and techniques to find security vulnerabilities that attackers could exploit. Depending on the project, you carry out these tests alone or in a small team. You explain the results and the scope of the penetration test in a report that the client receives as the result of the audit. Your everyday tasks and responsibilities as a penetration tester include:

• Planning and carrying out security tests for a wide range of applications, systems, (cloud) infrastructures, etc.
• Coordinating with the client and the penetration testers involved
• Documenting security and compliance issues
• Writing technical reports
• Communicating results in a way that suits the audience, to both technical and business contacts
• Advising on the mitigation of identified security risks
• Re-testing security improvements
• Research and training on different types of attacks
• Developing new and extended methods for penetration tests
• Further developing internal tools
• Automating common test procedures to improve efficiency

This list is not exhaustive. Further tasks that may be assigned to you less often and, where possible, only in line with your interests and skills:

• Reviewing code for security vulnerabilities (code review)
• Red teaming operations, where an undetected, more realistic approach is the focus
• Training, coaching and talks
• Reverse engineering of malware or spam
• Designing and carrying out emulated social engineering attacks
• Working on a long-term mandate for individual client companies

We make a point of involving you in exciting and varied projects that match your skills and goals. As part of a small company, you are keen to use your experience and skills in areas that are not directly related to penetration testing as well, such as suggestions for and work on the website, marketing, sales and reporting. As a company, we appreciate this and treat you as an equal. Part of your research and project work also includes writing blog posts for our website. Because the further training of our employees matters to us, an employee with a 100% workload receives a generous training budget and 10 working days per year. For employees with a reduced workload, the amounts and times are adjusted accordingly. Internal training on more specific topics or project types can also be requested. Knowledge sharing within the company is very important to us, both from a personal and a business perspective.

What you bring

• Knowledge of cyber security and experience in penetration testing, application security testing or other security auditing areas, ideally backed by certifications
• Resident in Switzerland
• Excellent written and spoken German and good English

• Impeccable reputation (proven by a current criminal record extract and debt enforcement register extract)

Salary

Starting salary with a master's degree, without professional experience or certification:

• CHF 105'000 gross per year

Starting salary with a master's degree and general IT work experience:

• CHF 123'000 gross per year

Senior penetration tester (degree, 5 years of penetration testing experience, 3 years of general IT work experience, certification such as OSCP, BSCP, CRTO, OSEP, CRTL, CAPE)

• CHF 147'000 gross per year