Pentetration Test Engineer

Job description

Shaping the future of travel is important to us at Amadeus. Today, with technology getting smarter by the minute, that future is more exciting than ever.

Our business success relies on our people being always passionate about what we do. We believe in aiming for excellence, taking responsibility, working together and putting our customers first.

Summary of the Role

The person would be responsible for technical security assessments of applications and infrastructure, security design reviews as well as risk assessments. This is a hands-on role, requiring technical skills from the hardware to the application layer.

Main Responsibilities

· Perform manual penetration testing of client systems, web sites and networks to discover vulnerabilities.
· Assessing application and solution security controls against «black box», «grey box» and «white box» attacks using both manual and automated penetration techniques
· Thoroughly document exploit chain/proof of concept scenarios for client consumption.
· Working experience with technical security controls
· Programming experience in Python, PHP, Perl, Ruby or other interpreted or compiled languages is a plus
· Familiarity with vulnerability assessment and penetration best practices
· Experience with vulnerability and penetration testing techniques and tools
· Holding one or more security-related certifications such as GIAC Penetration Tester (GPEN), GIAC Certified Incident Handler (GCIH), Offensive Security Certified Expert (OSCE), and Offensive Security Certified Professional (OSCP)

Skills & Knowledge – Technical / Functional and Managerial

· 3-5 years’ Experience in IT Security, preferably with exposure to application and infrastructure security testing (source code review and application penetration tests)
· Assessing application and solution security controls against «black box», «grey box» and «white box» attacks using both manual and automated penetration techniques
· Working knowledge of Security principles, techniques and technologies
· Good understanding of network protocols, design and operations
· Strong analytical skills and efficient problem solving
· Recommend industry best practices and specific to the enterprise risk profile use cases.
· Demonstrate clear experience with UNIX/Windows operating systems
· Demonstrated desire and ability to learn new technologies
· Ability to work with little/no supervision
· Ability to work as an integral part of a distributed team
· Ability to work well with stakeholders to understand their issues and needs

Any duplication and display of partial or full content of our job advertisement on any support, such as brochures, websites, mail, emails, this list is not exhaustive, is strictly forbidden without prior formal Amadeus’ authorisation.

Recruitment agencies:Amadeus does not accept agency resumes. Please do not forward resumes to our jobs alias, Amadeus employees or any other company location. Amadeus is not responsible for any fees related to unsolicited resumes.