Security Engineer - Pentester
Core
Conduct web, API, network, and infrastructure penetration tests to simulate cyberattacks, identify vulnerabilities, and improve the security posture of Scaleway's cloud products and services.
Role type
Security Engineer (Offensive Security/Pentester)
Builds
Internal pentesting stack and security testing workflows for cloud infrastructure
Domain
Cloud Security / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Penetration testing (web, APIs, networks, infra), OWASP Top 10, MITRE ATT&CK, vulnerability exploitation (XSS, SQL injection, buffer overflow, reverse engineering), security tools (Nmap, Metasploit, Burp Suite, OWASP ZAP), scripting (Python, Bash, SQL, PHP)
Preferred skills
Red Team/adversarial simulation experience, social engineering campaign execution
Technologies
Nmap, Metasploit, Burp Suite, OWASP ZAP, Python, Bash, SQL, PHP
Responsibilities
Conduct web, API, network, and infrastructure penetration tests; Simulate realistic cyberattack scenarios; Participate in Red Team or adversarial simulation exercises; Assess and prioritize vulnerabilities based on risk; Write clear and structured security reports; Collaborate with product and engineering teams to support remediation; Contribute to the design and implementation of the internal pentesting tool stack; Stay up to date with emerging vulnerabilities and offensive security techniques
Seniority
Mid-level to Senior, hands-on IC