(Senior) Penetation Tester

A large organization with a pleasant working atmosphere where people truly matter. Additionally, you will work on challenging projects and with the latest technologies for large national and international organizations. Alongside the hard work, we also regularly go out for a team drink or dinner. And our staff association organizes fun activities several times a year. What else can you expect?

• Unlimited All You Can Train budget so that you can obtain all your certifications and strengthen your hard and soft skills.
• All You Can Train without any obligations.
• A well-filled suitcase with holiday pay and enough time (26 days) to spend it.
• A non-contributory pension
• Work wherever you want on a device of your choice with our connectivity allowance.
• Your first necessity as a professional: a fast laptop and a SIM card that you may also use privately.
• Always on the move with your lease car or NS-businesscard. Or choose to have your travel expenses reimbursed.
• And of course, a suitable salary. We would be happy to discuss this with you.

Do you want to help organizations strengthen their digital resilience by finding vulnerabilities before real attackers do? As an experienced pentester, you will work on challenging security assignments that have a direct impact on the security of the Netherlands' digital infrastructure.

As part of our Red Team, you will work on diverse and technically challenging pentest assignments at organizations where cybersecurity is a top priority. From this offensive role, you will investigate how systems, applications, and infrastructures behave against realistic attacks. In doing so, you will deal with various types of infrastructures, modern cloud environments, API platforms, OT/IoT components, and diverse application landscapes. This allows you to continuously develop your technical skills and gain increasing insight into how complex enterprise environments are constructed and secured.

In your role, you will perform hands-on technical security tests, where you not only identify vulnerabilities but also demonstrate their actual impact from the perspective of an attacker. As a Red Team member, you think in attack scenarios, explore possible escalations, and show how vulnerabilities can be exploited in conjunction. Based on this, you provide clear and practical advice regarding concrete improvement measures.

In this, you will work closely with our Blue Team and our security architects. This collaboration ensures that your findings are directly translated into better detection, defense measures, and architectural choices. The cross-pollination between Red Team, Blue Team, and architecture gives you both offensive and defensive insights and helps you understand which measures are truly effective in practice regarding detection, monitoring, and mitigation.

Alongside your technical activities, you support clients by transferring knowledge, brainstorming about risks, and contributing to increasing their digital resilience. In this way, you help organizations not only resolve vulnerabilities but also become structurally stronger against modern cyber threats.

In your role, you will be involved in, among other things:

• Performing various IT security investigations, including:
  • web application and API pentesting
  • infrastructure and network pentesting
  • cloud security testing (Azure, AWS, or GCP)
  • social engineering and phishing simulations
  • Red Teaming and adversary simulation
• Creating security awareness among clients, for example through awareness sessions, security workshops, and live hacking demos.
• Performing and interpreting (partially) automated vulnerability scans and manually validating findings.
• Advising on all aspects of IT security, both technical (patching, hardening, architecture, configuration) and non-technical (processes, governance, awareness).
• Drafting clear reports in which you make risks concrete and advise on practical improvement steps.

Sharing knowledge within your team and contributing to the further professionalization of our offensive security services.

As a (Senior) Penetration Tester, you are analytically strong, curious, and driven to make organizations truly more secure. You combine technical depth with a proactive attitude, enjoy collaborating, and feel at ease in a role where you switch between research, advising, and sharing knowledge.

Additionally, you have / are:

• A clear passion for information security and offensive security.
• At least 3 years of experience in pentesting or a comparable offensive security role.
• A completed HBO or WO degree, preferably in a technical direction.
• At least one relevant certification such as OSCP, OSWA, CPTS, or CWES (or equivalent).
• Experience with commonly used tooling such as Burp Suite, Nmap, Metasploit, Nessus, and Wireshark.
• Able to motivate, coach, and support colleagues in their development.
• Ready and motivated to actively share knowledge within the team and with other disciplines.
• Someone who likes to think along about process improvement, quality assurance, and the further professionalization of our approach.
• Ambitious, proactive, and eager to learn: you continue to challenge yourself and constantly look for ways to improve.

Plus: if you possess deep, demonstrable expertise in cloud security OR Red Team tradecraft, that is a strong plus.

Get the future you want!

• Working at Capgemini also means working in the international heart of innovation. The top tier of technology. An employer with an eye for you and a focus on the future, in which sustainability and diversity and inclusion play the leading roles.
• Working at Capgemini also means working in the international heart of innovation. The top tier of technology. An employer with an eye for you and a vision on the future, in which sustainability and diversity and inclusion play the leading roles.

Want to apply? Please do!

Want to meet the team first? That is also possible!

You can email our recruiter Kim Landman (kim.a.landman@capgemini.com) for an introductory conversation, at the office or online.