EDV Werke is looking for a Penetration Testing Operations Lead / Service Delivery Manager
Working Model: Remote from Poland
Form of cooperation: B2B Contract
Responsibilities:
- Penetration Testing Program Management Managing the operational execution of a large-scale penetration testing program and coordinating numerous security assessments across internal systems and applications.
- Security Assessment Coordination Acting as the main point of contact between internal product teams and external security testing vendors to organize and oversee penetration testing activities.
- Stakeholder Scoping Workshops Conducting workshops with project stakeholders to define testing scope, security priorities, and assessment objectives.
- Testing Strategy and Vendor Selection Determining appropriate penetration testing approaches and selecting suitable external security vendors based on scope and requirements.
- Testing Lifecycle Coordination Coordinating testing schedules, managing timelines, and ensuring timely delivery of assessment reports and follow-up actions.
- Security Findings Communication Ensuring vulnerabilities and security findings are clearly communicated, documented, and tracked until remediation activities are completed.
Must-Have Skills:
- Penetration Testing Experience Six or more years of hands-on experience performing penetration testing across enterprise environments.
- Application Security Testing Knowledge Practical experience assessing web applications and identifying vulnerabilities in modern application architectures.
- Network and Infrastructure Testing Expertise Experience performing security testing of networks, infrastructure components, and enterprise systems.
- Security Testing Methodology Knowledge Strong understanding of penetration testing methodologies, threat assessment techniques, and attacker-oriented security thinking.
- Stakeholder Communication Skills Ability to conduct discussions with technical and non-technical stakeholders and clearly explain security risks and trade-offs.
- Professional English Communication Strong written and verbal English communication skills for collaboration with international teams.
Nice-to-Have Skills:
- Security Certifications Professional certifications related to penetration testing or cybersecurity are considered beneficial.
Benefits:
- Competitive salary with performance-based bonuses.
- Opportunities for professional development and advancement.
- Dynamic and collaborative work environment.