can you take this job posting "Security Tester
Location: Utrecht/Remote
Start date: januari/februari 2025
Duration: 12-36 months
Extension: Possible
Hours: 36 hours per week [partly remote]
Language: English
Closing date to apply : 15-12-2024, 09.00 AM
Note:
• This job is only open for candidates who are already living in the Netherlands/EU!
• This job is not suitable for freelancers!
Imagine:
You hasty get into a shop at the central station. During checkout you swipe your bank card at the
terminal and it beeps: "insufficient funds". You quickly grab your phone, log on to the Rabobank
app and transfer money from your savings account to your payment account. All this is made
possible in a secure and safe environment. One of the ways to guard this is by the security tests
done by security professionals. You help to find vulnerabilities by testing our applications.
Making a difference by:
• You are an experienced security tester/pen tester.
• You make a difference by conducting security tests and code reviews on (web)
applications, which are developed by or for the Rabobank.
• You search for vulnerabilities and report these to the relevant development teams. You
are also able to advise teams about how to remediate findings.
With each other:
Collaboration is at the heart of everything we do. Our Vulnerability Management team brings
talented people together to keep the Rabobank banking safe. Within your role as a security tester
the team will work on a variety of services, including Vulnerability Testing, Responsible
Disclosure and Vulnerability Scanning.
Growing a better world together:
You'll already be aware that Rabobank is a financial services provider for 7.1 million customers
in 40 countries. But did you know that we aim to contribute to real change with our 'Growing a
better world together' mission? We do so in countless ways, such as:
A third of all the food we purchase is thrown away. Together with Nature & Environment, we’re
working to increase awareness among consumers of how to reduce food waste.
• As part of a project with Humanitas, we are helping people who are experiencing
financial difficulties to get their household finances in order.
• Together with Vluchtelingenwerk Nederland (the Dutch Council for Refugees), we are
helping 1,500 refugees find a suitable job.
Requirements:
• Master/Bachelor degree
• Secure Code review: .NET, JAVA, React, AngularJS
• Infrastructure security knowledge: Azure, AWS, Linux, Windows.
• Network testing.
• Mobile testing: iOS, Android.
• Code-scanning
• (Web) Application testing.
• OSCP (or similar certifications) is highly preferred
• Experience with the Agile Way-of-working is important
Competences/skills:
• Security mind set,
• Out-of-the-box way of thinking,
• creativity,
• analytics,
• communication,
• co-operation,
• organisation sensitivity,
• pro-active.
Good to know:
High Risk Screening is required!
Response/Apply:
• Most recent CV, in Word format, max 5 x A4, in the English language
• Solid motivation, focused on the application
• Explanation of the requirements [red highlighted!] and competences set
• At least 1 recent reference, which can be verified!
• Rate/salary expectations
• Availability" and my experience "Batuhan Kahraman <<PRESIDIO_ANONYMIZED_EMAIL_ADDRESS>>
	
Ekler7 Ara Cmt 14:59 (2 gün önce)
	
Alıcı: Dave, burakhantahmaz
Hi Dave, sorry for the late reply. I was out of the office for a while. Yes, I am interested in the job included. Please also find the filled out checklist attached.

Best regards

Requirements:

    Master/Bachelor degree = I hold a Bachelor's degree in Pure Mathematics and another Bachelor's degree in Economics, as a result of successfully completing a double major program. My mathematics background improved my analytical and critical thinking skills and helped me approach complex problems systematically and creatively. Meanwhile, studying economics provided me with a deep understanding of data-driven decision-making, strategic thinking, and the ability to analyze real-world challenges from multiple perspectives.

    Secure Code review: .NET, JAVA, React, AngularJS = I have solid experience in backend secure code review, primarily on Python. I have some experience identifying weaknesses and vulnerabilities in Python .NET, and Java code. I have little experience in reviewing frontend code in frameworks like React and AngularJS.

    Infrastructure security knowledge: Azure, AWS, Linux, Windows. = I have experience with both Linux and Windows systems, including hands-on Linux system administration, and writing automation scripts using Bash for tasks such as managing cron jobs and system maintenance. I am also experienced in Windows administration, including configuring and managing Active Directory for identity and access management. Additionally, I have experience with Active Directory security assessments and penetration testing. While I have more experience  in on-premises systems, my experience with cloud platforms such as AWS, Azure, and Google Cloud is more limited.

    Network testing. = I have experience in network penetration testing. My expertise includes using tools like Nmap to perform reconnaissance by port scanning, as well as simulating and analyzing DDoS attacks to evaluate network resilience. Thanks to my OSCP certification, I possess a strong practical understanding of offensive security methodologies and network exploitation techniques.

    Mobile testing: iOS, Android. = I have knowledge on mobile application penetration testing from my technical training on mobile security testing. I have an understanding of common vulnerabilities, testing methodologies, and secure coding practices for mobile applications. I can identify security vulnerabilities and ensure best practices in mobile app development.

    Code-scanning = I have experience in both manual code reviews and automated code scanning to identify security vulnerabilities. In terms of automated tools, I know some Static Application Security Testing (SAST)  and Dynamic Application Security Testing (DAST) tools. I also have knowledge on security in DevOps (SDLC)

    (Web) Application testing. = I gained practical skills in web application security through the OSCP certification, where I learned to identify and exploit common vulnerabilities, including injection flaws, SQL injection (SQLi), cross-site scripting (XSS), and improper access controls, and more within the OWASP Top 10. In addition, I have freelance experience in bug bounty programs, on platforms like HackerOne and Bugcrowd.

    OSCP (or similar certifications) is highly preferred = I hold the Offensive Security Certified Professional (OSCP), eLearnSecurity Certified Professional Penetration Tester (eCPPT), and eLearnSecurity Junior Penetration Tester (eJPT) certifications. Additionally, I will be taking the Offensive Security Wireless Professional (OSWP) and KLCP certifications this month to further improve my knowledge. These certifications prove my hands-on penetration testing skills.

    Experience with the Agile Way-of-working is important = I have experience working with Agile methodologies from my internships in cybersecurity. During these internships, I participated in sprints, daily standups, and sprint planning meetings, using tools like Jira and Trello to track progress and collaborate with other peers.

Competences/skills:

    Security mind set, = My OSCP certification and penetration testing experience have improved my critical thinking and problem-solving abilities. I can effectively identify vulnerabilities and assess complex security issues.

    Out-of-the-box way of thinking = Thanks to my MATH background, I have the ability to think creatively and approach security challenges from multiple angles.

    creativity = The analytical nature of my Mathematics and Economics studies helps me to develop creative solutions when facing new or difficult security problems.

    analytics, = My hands-on experience from cybersecurity internship in TU/e has improved my analytical thinking skills.

    communication, = Working in teams during my cybersecurity internships taught me to effectively communicate complex security issues to both technical and non-technical people.

    co-operation, = Through collaboration in college projects, I developed strong teamwork skills and learnt to work with diverse groups.

    organisation sensitivity, = I am aware of organizational dynamics, and I take a proactive approach to protect systems and data.

    pro-active. = The hands-on experience gained from my OSCP certification and penetration testing has equipped me with a proactive security approach. I can identify and address security risks and act swiftly to prevent incidents before they become major issues." and write  write a solid motivation for the Rabobank, based on the role included