Penetration Tester

At thyssenkrupp GSG, we are the driving force behind thyssenkrupp’s global IT and Business operations. With passion and expertise, our teams design, develop, and support the applications and infrastructure that keep thyssenkrupp’s worldwide business moving forward.Just as we build resilient IT solutions, we are building our culture on Trust, Respect, and Empowerment - creating space for open feedback, treating everyone equally, and giving teams the autonomy and support to grow.

By joining us, you’ll

• Drive global impact: Work on international projects that shape the digital future of industry.
• Open culture & growth: Be part of a high-tech company where your ideas matter and get access to cutting-edge tools, technologies, and training to accelerate your career.
• Team spirit: Collaborate in an environment where contributions are valued and success is fueled by teamwork.
• Work-life balance: Enjoy flexible working that keeps you connected to what matters most - professionally and personally.

We’re not just building IT systems-we’re building the future. Ready to be part of it?

Your responsibilities

• As a Penetration Tester, you will be responsible for identifying and investigating security vulnerabilities at thyssenkrupp
• Interact with clients to determine their requirements for the tests
• Contributes to penetration testing methods, scripts and tests
• Support the vulnerability management and other security-related projects
• Create reports and recommendations from findings
• Mentor and support less experienced resources

Our requirements

• Degree in Computer Science (or equivalent practical qualification) with at least 3 years of hands-on experience in web application and infrastructure penetration testing.
• Proven track record in red teaming, source code review, and in-depth knowledge of the OWASP Testing Guide (e.g., XSS, CSRF, session management).
• Proficiency with standard industry tools (Burp Suite, Metasploit, Nessus, Wireshark, Bettercap) and scripting capabilities (Python, Bash, Ruby).
• Strong critical thinking and problem-solving skills, with the ability to analyze complex datasets and extract actionable security findings.
• Professional working proficiency (written and spoken) in English. Germain would be a plus.
• Experience assessing AI-based applications or utilizing AI-driven offensive security tooling would be a plus.

What we offer

• At thyssenkrupp GSG, we believe great work starts with employee. Here’s what you can expect when you join our team:
• Global impact & open culture: Be part of a high-tech company shaping industries worldwide, where your ideas truly matter.
• Flexible workstyle: Enjoy remote work possibilities and flexible hours - start your day anytime between 7:00 and 10:00.
• Supportive onboarding & career growth: Get started with guidance from experienced mentors and follow clear paths for development and promotion.
• Continuous learning: Access to premium training platforms, foreign language classes, and a personal development budget.
• Wellbeing & community: Take care of yourself with private medical care, life insurance or join company sports initiatives.
• Team spirit & events - integration budget, interdepartmental teams, company and family activities to stay connected, even remotely.
• Extra perks: From anniversary bonuses and MyBenefit platform to the “under the pear tree” holiday benefit, we make sure your hard work is appreciated.