About This Role
This role is for a deep technical security expert, accountable for delivering penetration tests to enhance the software and infrastructure security of the CMA CGM Group. Reporting to the Group Head of Application Security, the role involves validating the proper security implementation of the company's assets. Proven experience in red team assessments and infrastructure penetration tests is required.
Responsibilities
- Deliver all kinds of application penetration tests: web applications, APIs, mobile applications, thick client applications
- Deliver infrastructure penetration tests: Active Directory, Wi-Fi, networks, etc.
- Identify full compromise paths and kill-chains
- Compromise modern infrastructures (containerized, microservices) and cloud platforms (AWS, GCP, Azure)
- Provide technical expertise and understanding to other services (e.g., SOC, Forensic)
- Provide recommendations and mitigations to remediate or mitigate vulnerabilities
- Coordinate with various IT and business teams to prepare and organize penetration tests
Requirements
- Bachelor or Master degree in Computer Science, Information Technology or relevant degree
- OSCP, OSWE, OSCE or any other relevant certification
- 5+ years of experience in penetration testing
- Proven experience with infrastructure penetration tests and red team assessments
- Excellent knowledge of OWASP Top10, CWE
- Excellent understanding of micro-services architectures and APIs
- Proven penetration tester experience
- Use of various tools such as Burp Suite, Zap, Kali distribution
- Network skills (routing, encapsulation, VPN, firewalling, DNS)
- Ability to interact with CMA CGM colleagues, build good relationships at all levels and across all business units and organizations, and influence stakeholders of all levels
- Excellent verbal, written and interpersonal communication skills; able to listen and communicate technical subjects to both technical and nontechnical audiences, flexing style to suit the needs of the audience
- Ability to work effectively with others, with third parties, internal teams, and international business units, promoting knowledge sharing within and across teams
- Highly self-motivated and directed, with keen attention to detail
- Ability to properly manage time and priorities
- Rigor and quality
- Customer-oriented approach
- Fluent English mandatory
Nice to have:
About the Company
CMA CGM Group is a company focused on improving its software and infrastructure security.
