Within a public research and academic institution in Luxembourg, cybersecurity plays a critical role in protecting research data, institutional systems, and emerging digital services.
The organization regularly performs penetration testing activities to assess and strengthen the security posture of its IT ecosystem.
As part of its digital evolution, there is a growing focus on:
AI-powered systems
Internal university chatbots
Research-related web applications
APIs and interconnected digital services
The objective is to ensure that new and existing systems comply with institutional cybersecurity, data protection, and risk management standards.
Provide on-demand penetration testing services to:
Identify vulnerabilities in web applications and APIs
Assess risks related to AI-driven tools and chatbots
Evaluate authentication and authorization mechanisms
Detect potential data exposure or misuse scenarios
Strengthen the overall security posture of digital services
Web application penetration testing
API security testing
Authentication and access control assessment
OWASP Top 10 vulnerabilities
Session management review
Input validation and injection testing
Prompt injection testing
Model misuse and abuse scenarios
Data leakage and unintended exposure
Access control bypass attempts
Output manipulation risks
Jailbreak and adversarial testing techniques
Handling of sensitive research data
Protection of intellectual property
Compliance with institutional security policies
Secure integration with internal IT systems
Confirmed or Senior Pentester
Strong experience in web and API security
Knowledge of AI/LLM threat models and emerging risks
Ability to work autonomously
Experience in public sector, academic, or research environments is a plus
Strong reporting and communication skills
Location : Luxembourg
Un plan personnalisé pour postuler intelligemment à cette offre.
Cliquez sur "Postuler" pour accéder à l'offre.