Ethical hacker

ASML relies on complex digital, industrial, and product environments to enable innovation at scale. Within Ethical Hacking Services, we perform independent, authorized security assessments to help protect ASML's products, services, intellectual property, operations and data.

As an Ethical hacker, you will perform penetration tests and security assessments across applications, infrastructure, and cloud environments. We value the diverse expertise within the team, and if you have a solid background in areas such as product security, OT/ICS, adversary simulation, AI, or emerging technologies, you will have the opportunity to apply those skills on specialized engagements.

In this role, you will:

• Plan and conduct authorized security assessments across a diverse range of technologies, systems, and environments
• Lead intake: clarify objectives, identify dependencies, define scope, select an appropriate test approach, and agree with rules of engagement with relevant stakeholders
• Produce clear technical reports and executive-ready summaries that explain evidence, impact, root cause and practical remediation options
• Present findings to technical and non-technical stakeholders, align corrective actions, and perform re-assessments to verify remediation effectiveness
• Collaborate with developers, engineers, and security stakeholders to identify, prioritize, and remediate security risks, while maintaining the independence and objectivity of security assessments
• Improve testing methodologies, automation, knowledge assets, tooling and service processes; share lessons learned and contribute to team capability development. Share security knowledge and real-world insights by creating and delivering awareness content, training, and workshops that promote a strong security culture across the organization.

• Depth in one or more core domains: web, infrastructure, cloud security testing
• Programming experience in one or more languages
• Ability to validate findings manually, reason over attack paths, and avoid overreliance on automated tooling
• Good time management skills; the ability to commit and adhere to time-sensitive deliverables
• Clear communication with both technical and non-technical stakeholders
• Ability to conduct scoping and closure meeting calls, be the main point of contact, lead report generation activities, and be the main interface with stakeholders on security assessments

• Some work may require onsite presence, cross-time-zone coordination, or limited travel.
• This is a pipeline vacancy, and we welcome applications from candidates across different seniority levels, including junior, mid-level, and senior profiles.
• The position is open to candidates residing in the Netherlands or the European Union, with eligibility to work in the relevant location.