IT Security Engineer (m/f/d) · Penetration Testing & Red Teaming

Hybrid: mostly remote within Germany, occasionally at our Bonn office.

You think like an attacker and work like an engineer – in classic pentests, red team engagements and AI system testing, supported by VamiRedteam.

• Penetration tests of web applications, APIs, cloud environments, internal networks and Active Directory
• Red team engagements and assumed-breach scenarios, including reporting for management and engineering
• Pentests of AI applications and agents (prompt injection, jailbreaks, tool abuse), rated with CVSS and AIVSS
• Steer and validate agentic pentests with VamiRedteam – human in the loop, every finding with a proof of concept
• Evolve methodology and playbooks along the OWASP standards (WSTG, ASVS)

Your profile

• Several years of experience in penetration testing or red teaming
• In-depth knowledge of web and API security, Active Directory and common attack techniques (MITRE ATT&CK)
• Confident with tools such as Burp Suite, BloodHound, Nuclei or Metasploit and scripting in Python or PowerShell
• Excellent German (at least C1) and good English
• A plus: OSCP, OSEP, OSWE, CRTO or comparable certifications

What We Offer

Why VamiSec?

Remote-First

Flexible work from anywhere in Germany – we trust in results.

Professional Development

Certifications, training, and conferences – we invest in your growth.

Responsibility

Autonomous work on exciting projects for renowned clients.

Team

Small, highly motivated team with flat hierarchies and direct communication.

Competitive salaries, bonuses, and benefits – transparent and performance-based.

Impact

Your work makes organizations and critical infrastructure more secure.