Penetration Tester

About the role

The Penetration Tester will report to the Group Head of Application Security and act as a deep‑technical security expert for CMA CGM Group. The role focuses on validating security implementations across applications, infrastructure and cloud environments.

Key responsibilities

• Perform comprehensive penetration tests on web applications, APIs, mobile and thick‑client applications.
• Conduct infrastructure assessments covering Active Directory, Wi‑Fi, networks, routing, VPNs and firewalls.
• Identify full compromise paths, kill‑chains and exploit modern containerised, micro‑service and cloud platforms (AWS, GCP, Azure).
• Provide technical guidance to SOC, forensic teams and other stakeholders, and deliver remediation recommendations.
• Coordinate test planning with IT and business units to ensure smooth execution.

Required profile

• Bachelor or Master degree in Computer Science, IT or related field.
• 5+ years of hands‑on penetration testing and red‑team experience.
• Relevant certifications such as OSCP, OSWE, OSCE or equivalent.
• Excellent communication skills in English; French optional.

Required skills

• Proficiency with tools like Burp Suite, OWASP ZAP, Kali Linux.
• Strong knowledge of OWASP Top 10, CWE, and attack vectors.
• Experience with cloud platforms (AWS, GCP, Azure) and containerised/micro‑service architectures.
• Network expertise: routing, encapsulation, VPN, firewalling, DNS.
• Hands‑on experience with Active Directory, Wi‑Fi security assessments.