Security Engineer (Pentester)

Remote from: Europe, France, Spain, UK
Category: Engineering
Job type: Full Time,
Opening date: 20 Jan 2023
Closing date: 21 Mar 2023
Views: 594

— Job description
— How to apply
— Related jobs

On-demand delivery for businesses • 🇫🇷 🇬🇧 🇪🇸 🇵🇱 • H+, Same-day & Next-day delivery & Return solutions

Logistics & Supply Chain
2015

We are an impact-driven company that aims to build the future of logistics for a more sustainable world: shared, efficient and reliable. We are committed to creating a new standard for urban deliveries that meet today’s environmental and social challenges while offering a premium delivery experience blending speed, flexibility and convenience.

Our motto: “Make every delivery a moment all of us can truly celebrate!” More than 3000+ leading brands already partner with us across Restaurants, Grocery, Retail & Luxury, eCommerce and Professional Services to deliver all types of goods at the tap of a button. Stuart is a highly diverse and inclusive company of 700+ employees with 90+ nationalities working across France 🇫🇷, Italy 🇮🇹, Poland 🇵🇱, Portugal 🇵🇹, Spain 🇪🇸 and the U.K. 🇬🇧

It’s the right moment and the right place for us to make an impact on millions of people, as home delivery services hit a record high. And guess what? You can help us fulfil our vision 🙌

Let’s talk about Security Engineering 🔒

The Security team’s vision is to establish the foundation for security practices at a company level and protect the product, customers and employees 🚀 This role will have a huge impact in the Security department.

You will join a multicultural Security team of 5 world-class engineers and will report to Erika, Head of Security based in Barcelona. You’ll be able to lead your own Security projects in an autonomous way while partnering with the team to continuously improve our security posture. There are multiple new initiatives to launch and lots of room for real career development! 💫

What will you be doing? 🤔

Designing and conducting penetration tests to our internal and third-party applications, as well as coordinating remediation and mitigation activities.
Developing our Application Security program by establishing and enforcing security best practices for our new and existing products, services and technical components.
Working with both open source and commercial tooling to coordinate vulnerability assessments, maintaining an expert level understanding of attack vectors and emergent threats.
Collaborating with our Security Incident Management efforts by helping develop alerting capabilities based on new threats and vulnerabilities.
Partnering with Stuart internal teams to identify and implement technology or process improvements that help mature our security services.
Structuring our Vulnerability Management program and pentesting activities by defining goals, launching roadmaps, establishing metrics and reporting results.
🌈 Adding to our amazing company culture

What do we need from you? 😎

Bachelor degree in a computer science field OR relevant certification (OSCP, CEH, SANS, OSCE)
2+ years of experience conducting pentesting activities, with demonstrable experience in manual testing in addition to automated tools
Demonstrable knowledge in web application penetration testing, under OWASP or equivalent framework
Demonstrable knowledge in mobile application penetration testing (iOS & Android)
Deep understanding of network architecture and protocols
Deep understanding of operating systems (Linux is a must, Windows/Mac are nice to have)
Hands-on experience with penetration testing and vulnerability detection tools (Burp Suite, ZAP, Metasploit, Nessus…)
Good knowledge of at least one scripting language (Python, Bash, PowerShell…)
Good understanding of API vulnerabilities
Ability to effectively communicate findings and contextualize risks to technical and executive leadership
Resourceful and creative thinker with strong analytical skills, able to leverage unconventional and innovative ideas to solve complex problems
Fluency in English

Want to put a smile on our face?😉

Source code analysis
Experience with red team activities
Reverse engineering
Forensics
Cryptography
Cloud security (Mainly AWS but GCP and Azure are a plus)
Experience responding to incidents

The stuff you wanna know 😉

Work-life balance – work from home and flexible hours 🏡
Option to work remotely anywhere in Spain 🇪🇸
Ticket Restaurant by Edenred (€11 daily) 🥗
Unlimited access to Udemy for all your learning and development needs 📚
Stuart Academy with regular workshops, Stu-Classes, and Stu-Talks 🎓
Stuart is putting Mental Health Awareness first! Wellness Allowance (€40 monthly) to use in any gym or sport class 🧘
Private healthcare provided by Sanitas 🧑‍⚕️
2 volunteer days per year to have a positive impact on our communities and the environment
Work-from-Abroad policy (enjoy 30 days per year working from anywhere!) 🏞
Work in an international, dynamic and passionate environment with a company culture focused on learning and development 🎉

At Stuart, we believe that employees today want to evolve in collaborative, high-growth environments where they can demonstrate their abilities and thrive both professionally and personally. We are convinced that employees need to find alignment between their inner values and their company’s culture and mission to unlock their full potential. We work to create a culture of empowerment, continuous learning and growth where everyone can bring expertise, own projects and easily measure their impact 🙌

Stuart is proud to be an equal opportunity workplace dedicated to promoting diversity. We don’t discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status 💙

Please note: Our Talent Acquisition Team is international coming from across the world 🌍 We kindly ask you to please submit your CV and application in English so that it can be reviewed correctly (unless the job posting is in a language other than English). Thank you 🤗