About WebSec WebSec is a start-up cybersecurity company in Amsterdam.
We offer a range of offensive security services such as phishing campaigns, responsible disclosure managed service, threat hunting / red teaming and of course penetration testing.
Describing activities - Pentesting / Auditing Software and Hardware code - Analyzing and Reversing the execution flow of specific malware - Cryptographic Vulnerability Analysis - Development of Decryption Software - Vulnerability Research of Ransomware - Exploit Research &amp; Development
Skills
<ul>
<li>Masters or PhD in relevant technical field or a bachelor’s with significant real-world experience (Preferably Cryptography)</li>
<li>At least 6 years of relevant experience in the field of reverse engineering and/or security</li>
<li>Experience in various attack techniques, you got a hackers mindset.</li>
<li>Offensive Security Certifications such as OSCE3 or OSEE</li>
<li>Hands-on experience in a Security Operations, ideally also with pentesting software and mobile applications.</li>
<li>Experience developing embedded systems.</li>
<li>Experience using debuggers such as gdb, WinDbg, OllyDbg, x64dbg.</li>
<li>Experience reading and writing assembly (x86, x64, ARM, PPC, MIPS, etc.)</li>
<li>Experience developing or maintaining low level programming language (ASM) code.</li>
<li>Experience employing static or dynamic analysis techniques for binary analysis.</li>
<li>Experience using reverse engineering tools such as IDA Pro, Radare2, objdump</li>
<li>Experience developing binary instrumentation or source transformation tools.</li>
<li>Understanding of exploit mitigations such as DEP, ASLR, and stack canaries</li>
<li>Understanding of ROP gadgets or other exploit programming techniques</li>
<li>Understanding of OS internals including device drivers and kernel development</li>
<li>Expert proficiency with the C coding language</li>
<li>Good communicative writing and speaking skills in Dutch and English</li>
</ul>
Nice to have
<ul>
<li>Projectmanagement Certifications such as ITILv4 or Prince2</li>
<li>Certifications such as: eCRE, GREM, GXPN</li>
<li>CVE Numbers related to vulnerabilities in ICS Software or Hardware</li>
<li>Track record of Responsible Disclosures</li>
<li>A Github portfolio with security tools, exploits or publications</li>
<li>Red Teaming Experience</li>
<li>Military SIGINT Experience</li>
</ul>
What we offer
<ul>
<li>Remote working opportunities</li>
<li>Professional growth opportunities (inc. certifications and courses)</li>
<li>Company car or public transport card</li>
<li>Company laptop</li>
<li>A salary between €4000 - €5000 gross</li>
<li>Informal atmosphere</li>
</ul>
&nbsp;

Polina Voronina

A specialist who is able to analyze machine code of software and hardware to understand the information flow for the purpose of vulnerability research.

(Principal) Vulnerability Researcher / Reverse Engineer

About WebSec WebSec is a start-up cybersecurity company in Amsterdam.
We offer a range of offensive security services such as phishing campaigns, responsible disclosure managed service, threat hunting / red teaming and of course penetration testing.
What skills are we looking for
<ul>
<li>minimum bachelor level of education</li>
<li>you have already got these certifications AZ-303, and AZ-304</li>
<li>Willing to undertake AZ-500, SCS-C01</li>
<li>minimum seven years of work experience in IT, with at least five years of experience in information Security</li>
<li>demonstrable knowledge of application security &amp; secure coding (OWASP)</li>
<li>agile way of working in DevOps and SecOps</li>
<li>experience in writing and reviewing IS documentation and reports and providing advice.</li>
<li>knowledge of IS risk management (frameworks) such as NIST, MITRE ATT&amp;CK, PTES, OWASP WSTG, and TIBER-EU</li>
<li>strong communication skills in English, Dutch is a big plus.</li>
</ul>
The candidate should be familiar with
<ul>
<li>networking &amp; security knowledge e.g.: Firewalls, Proxies, DNS, sub-netting, emerging technologies such as SDN, VoIP</li>
<li>vulnerability management</li>
<li>cloud security with focus on leading cloud services such as AWS and Azure</li>
<li>experience with performing risk assessments, and supervising pentests</li>
<li>demonstrable knowledge and experience in security processes, technologies and architectures such as hardening, patch management, access control, cryptography, communication protocols, Windows and Linux</li>
</ul>
Nice to have
<ul>
<li>Projectmanagement Certifications such as ITILv4 or Prince2</li>
</ul>
<ul>
<li>Security Certifications such as CISM, CISA, CISSP or OSCP</li>
<li>A completed Master degree</li>
</ul>
What we offer
<ul>
<li>Remote working opportunities</li>
<li>Professional growth opportunities (inc. certifications and courses)</li>
<li>Company car or public transport card</li>
<li>Company laptop</li>
<li>A salary between €3000 and €4000 gross</li>
<li>Informal atmosphere</li>
</ul>

DevSecOps are specialists with broad knowledge of both software development, securing and configuring of networks and infrastructure.

(Medior-Senior) DevSecOps Engineer

About WebSec WebSec is a start-up cybersecurity company in Amsterdam.
We offer a range of offensive security services such as phishing campaigns, responsible disclosure managed service, threat hunting / red teaming and of course penetration testing.
Describing activities - Monitoring &amp; Detecting of suspicious network activity through analysis of log data to determine the root cause of security incidents and take the necessary mitigation activities, Develop and implement SIEM use cases and incident response plans with the SOC supplier(s). - Conducting threat analyses. - Collaborate with stakeholders during incident response activities and set up compensatory measures. - Identify and implement possible improvements in the SOC services.
Skills
<ul>
<li>Completed bachelor education in IT</li>
<li>At least 3 years of relevant experience in the field as an IT Security and/or Incident Response Specialist</li>
<li>Experience in various attack techniques, you understand how a hacker works.</li>
<li>Offensive Security Certifications such as OSDA, OSWA or OSCP</li>
<li>Hands-on experience in a Security Operations Center, ideally also in SIEM and related security monitoring techniques, infrastructure platforms, networks and tooling</li>
<li>A pragmatic attitude, you are flexible and can advise independently on complex IT security issues</li>
<li>Experience with SIEM software, such as QRadar, Splunk or Suricata.</li>
<li>Experience with Firewall’s such as Barracuda Web Application Firewall.</li>
<li>Experience with Monitoring tooling like Office cloud app security, Nagios, Fortianalyzer, Fox CTMp, AD Audit Plus, ISPProtect,&nbsp; Microsoft SCCM</li>
<li>Experience with at least two scripting language such as: Bash, Powershell or Python</li>
<li>Good communicative writing and speaking skills in Dutch and English.</li>
</ul>
Nice to have
<ul>
<li>Projectmanagement Certifications such as ITILv4 or Prince2</li>
<li>Certifications such as: GSEC, GCIH and/or CISA, CISM, CISSP</li>
<li>A completed Master degree</li>
<li>CVE Numbers</li>
<li>Track record of Responsible Disclosures</li>
<li>A Github portfolio with security, forensics or monitoring tooling &amp; scripts made by you</li>
<li>Red Teaming Experience</li>
</ul>
What we offer
<ul>
<li>Remote working opportunities</li>
<li>Professional growth opportunities (inc. certifications and courses)</li>
<li>Company car or public transport card</li>
<li>Company laptop</li>
<li>A salary between €3500- €4500 gross</li>
<li>Informal atmosphere</li>
</ul>

A SOC analyst is a cybersecurity professional who works as part of a team to monitor and fight threats to an organization's IT infrastructure.

(Medior-Senior) SOC Analyst

About WebSec WebSec is a start-up cybersecurity company in Amsterdam.
We offer a range of offensive security services such as phishing campaigns, responsible disclosure managed service, threat hunting / red teaming and of course penetration testing.
Describing activities - Intake with clients to determine scope and rules of project - Pentesting at clients location or remote - Red Teaming - Phishing Campagnes - Security Awareness Trainings - CERT Managed Service (Responsible Disclosure Triage)
Skills
<ul>
<li>IT-security is your passion</li>
<li>Strong experience in application and network penetration testing</li>
<li>Security Experience in any of the following subjects: Automotive, Embedded device, IoT, ICS, Mobile Application Security, Web Application Security, Network &amp; Infrastructure Security</li>
<li>Experience in programming languages ​​such as C, Python.</li>
<li>Excellent communication skills in English and Dutch.</li>
<li>You have your OSCP certification</li>
<li>You have your CISSP certification or willing to undertake it</li>
<li>Bachelor degree in IT or related field</li>
</ul>
Nice to have
<ul>
<li>Projectmanagement Certifications such as ITILv4 or Prince2</li>
<li>Senior Certifications: OSCE3 or GIAC GXPN</li>
<li>A completed Master degree</li>
<li>CVE Numbers</li>
<li>Track record of Responsible Disclosures</li>
<li>A Github portfolio with security tooling or exploits made by you</li>
<li>Blue Teaming Experience</li>
</ul>
What we offer
<ul>
<li>Remote working opportunities</li>
<li>Professional growth opportunities (inc. certifications and courses)</li>
<li>Company car or public transport card</li>
<li>Company laptop</li>
<li>A salary between €3500 and €4500 gross</li>
<li>Friendly atmosphere</li>
</ul>

Penetration testers, also known as “ethical hackers,” are highly skilled security specialists that use offensive security techniques to identify potential vulnerabilities in computers/networks and websites.

Open Jobs

(Principal) Vulnerability Researcher / Reverse Engineer

(Medior-Senior) DevSecOps Engineer

(Medior-Senior) SOC Analyst

(Medior-Senior) Penetration Tester