Open position
IT Security Engineer (m/f/d) – Penetration Testing & Red Teaming
Hybrid: mostly remote within Germany, occasionally at our Bonn office.
You think like an attacker and work like an engineer – in classic pentests, red team engagements and AI system testing, supported by VamiRedteam.
Your responsibilities
- Penetration tests of web applications, APIs, cloud environments, internal networks and Active Directory
- Red team engagements and assumed-breach scenarios, including reporting for management and engineering
- Pentests of AI applications and agents (prompt injection, jailbreaks, tool abuse), rated with CVSS and AIVSS
- Steer and validate agentic pentests with VamiRedteam – human in the loop, every finding with a proof of concept
- Evolve methodology and playbooks along the OWASP standards (WSTG, ASVS)
Your profile
- Several years of experience in penetration testing or red teaming
- In-depth knowledge of web and API security, Active Directory and common attack techniques (MITRE ATT&CK)
- Confident with tools such as Burp Suite, BloodHound, Nuclei or Metasploit and scripting in Python or PowerShell
- Excellent German (at least C1) and good English
- A plus: OSCP, OSEP, OSWE, CRTO or comparable certifications
Penetration TestingRed TeamingWeb & APIActive DirectoryAI PentestingOWASP WSTGOSCP
What We Offer
Why VamiSec?
Remote-First
Flexible work from anywhere in Germany – we trust in results.
Professional Development
Certifications, training, and conferences – we invest in your growth.
Responsibility
Autonomous work on exciting projects for renowned clients.
Team
Small, highly motivated team with flat hierarchies and direct communication.
Fair Compensation
Competitive salaries, bonuses, and benefits – transparent and performance-based.
Impact
Your work makes organizations and critical infrastructure more secure.