Pentester - Freelance

Context

Within Group Digital & IT, the OSO team is responsible for continuously pentesting the Saint-Gobain environment and applications across all business units and regions. The team also performs Red Team and Purple Team exercises to help improve the company’s cybersecurity posture.

As a Pentester, you will be responsible for identifying vulnerabilities in information systems (applications, infrastructures, networks) by simulating attacks in an approved environment to ensure their security and provide tailored recommendations.

Missions

• Analyze the needs and objectives of the tests (specifications) and define the scope of penetration testing.
• Conduct manual and automated tests to detect vulnerabilities.
• Simulate attacks to assess risks (external, internal, application tests, etc.).
• Document the steps and results of the tests.
• Write clear and concise reports presenting identified vulnerabilities, impacts, and recommendations.
• Present the results to technical teams and/or decision-makers.
• Perform pentests on applications and systems subject to the tests in an already approved environment.
• Assist the OSO team in Purple Team exercises.
• Support the rest of the CyberSoc team and GDI Cyber teams in understanding attack patterns, risks, and threats.
• Help the OSO team develop tools to improve Saint-Gobain security.

Working Conditions

• Saint-Gobain homeworking policy allows a maximum of 2 days of home office per week.