Penetration Tester

OSP Taipei operates on a hybrid work model and does not have options for fully remote work.

We are seeking a highly skilled and motivated Security Engineer to join our team, focusing on comprehensive penetration testing and vulnerability assessment. This role involves planning and executing tests, developing automated exploits, and supporting teams with security training and threat analysis.

Key Responsibilities:

• Planning and executing tests: You will create detailed test plans, execute them and evaluate the results.
• Versatile test scenarios: In addition to web applications in different programming languages, you will also test infrastructure components and services such as Active Directory.
• Exploits and automation: You will develop automated exploits and analyze the results of vulnerability scans and similar tools.
• Vulnerability assessment and remediation: You will analyze findings in terms of criticality and exploitability, propose effective solutions, and follow up on critical and high findings until they are remedied
• Support and training: You will support teams in interpreting and remediating vulnerabilities and train developers to become junior penetration testers.
• Threat analyses: You will carry out threat analyses to identify and minimize potential risks at an early stage.
• Optional: In the future, you can take over the coordination of external testers.

• Degree in information security or computer science, or equivalent education.
• Experience in penetration testing, especially for web applications.
• Preferably hold certifications like CEH, OSCP, or GWAPT.
• Enjoy working with international teams and supporting security measures.
• Strong communication skills to clearly explain complex technical issues.
• Excellent written and spoken English skills.