BedrijfsomschrijvingNouvall Engineering Services is specialized in project support for the (petro) chemical, IT and maritime industry. We provide expertise in the field of Engineering, Project Management, Maintenance, Shutdowns, Construction and Safety. FunctieomschrijvingMission:We search for a senior pentester for 2 kinds of pentesting: Infrastructure and application pentesting. The target includes but is not limited to Windows, Linux, cloud infrastructure, ICS, web applications, fat clients, APIs, µ-service architecture etc..., host-based audits and social engineering testing.The goal that should be attained is to identify vulnerabilities in new and existing technical infrastructures, applications and/or systems but also to identify design and implementation weaknesses in new and existing applications and in inter-applicative flows, as well as validating technical and business measures (e.G., specific business measures to avoid fraud) based upon the scope of the test.The penetration test can consist of different scenarios, such as:Source: both internal and external (from internet) penetration testingApproach: white-box (all available information), grey-box (some inside information) and black-box approach (no information)Methodology: cautious (discovery, enumeration, vulnerability mapping…) to aggressive (exploitation of vulnerabilities, denial of service…)Technique: network based. Host-based testing and social engineering by default do not make part of this type of testing.The consultant proposed must dispose of an extensive professional experience of 10 years or more as an infrastructure and application penetration tester. Furthermore, (s)he must dispose of an extensive professional experience of at least 5 years with critical infrastructure. Functie-eisenSpecific technical skills:- Network technologies (Ethernet, Wi-Fi, fibre channel, Bluetooth…) and detailed knowledge of protocols.- Authentication technologies (both user and machine) and mechanisms.- Encryption techniques.- Operating systems (Windows, Linux, Solaris…).- Cloud services (e.G., Microsoft stack, …)- Cloud architecture and principles, including interconnectivity/interoperability between systems, services and applications- Cloud, on premise and hybrid topologies- µ-services- Enterprise service bus architecture (incl. API-gateway)- Proprietary systems and protocols, including industrial control systems (ICS), Supervisory control and data acquisition (SCADA), …- Well known attacks and techniques to defeat security controls.- Scripting (Bash, Python, PowerShell, ...)- Network design and architecture.- Multi-layered security (defence in depth) principles- Database systems (e.G., Microsoft SQL, Oracle Database, …)- Middleware (e.G., Web Application Servers, Enterprise Service Bus, Business analytics tooling, ETL, …)- Secure application development.- Programming languages (e.G., Java, Microsoft .NET, …).Soft skills:- Team player- Communicative- Independent worker- Discreet- CuriousSkills:- Azure -> Expert- Cloud architecture -> Advanced- Cyber Security -> Expert- Developer-> Expert- IP -> Expert- Linux -> Expert- Reverse Engineering -> Expert- Secure application development -> Expert- Security testing -> Expert- Solaris -> Inermediate- Windows/Microsoft OS -> Expert- Windows Server -> ExpertLanguages- Dutch -> Full professional- French -> Full professional- Englisch -> Full professionalSollicitatieprocedureApply through our website and discover the opportunities.