Penetration Tester & Vulnerability Analyst in Hannover bei Continental

Continental’s digital capabilities are growing every day, and that includes our Tires IT Competence Center Cybersecurity & Networks. Our team creates solutions to protect our company – and we want you to join us!

We set Continental’s cybersecurity and network strategy and work closely with our large global network of stakeholders to develop standards. No day is the same – with a flexible work structure and the freedom to act, we encourage our people to develop their own ideas and contribute to a variety of projects that interest them.

If you value flexibility and thrive on driving innovative solutions from idea to implementation, Continental is the perfect match for you.

We are seeking a skilled and experienced Penetration Tester & Vulnerability Analyst (m/f/diverse) to join our team. As a Penetration Tester & Vulnerability Analyst (m/f/d), you will be responsible for assessing the Cybersecurity vulnerabilities of our systems and applications, identifying potential risks, and conducting vulnerability scans and penetration tests to uncover any weaknesses in our infrastructure and applications. Your work will help ensure the integrity and security of our organization's sensitive data and systems.

Your tasks

• Performing comprehensive vulnerability scans and penetration tests on various systems, networks, and applications to identify potential Cybersecurity risks
• Conducting manual and automated Cybersecurity testing to assess the effectiveness of existing Cybersecurity measures
• Developing and executing detailed test plans, including defining the scope, methodologies and tools required for each test
• Analyzing and interpreting the results of vulnerability scans and penetration tests and providing detailed reports with actionable recommendations for remediation
• Collaborating with development and IT teams to implement recommended Cybersecurity measures and best practices
• Staying updated with the latest Cybersecurity threats, vulnerabilities, industry trends and proactively propose innovative solutions to mitigate risks
• Participating in ongoing Cybersecurity awareness and training programs to promote a culture of Cybersecurity throughout the organization
• Assisting in incident response activities, including investigating and resolving Cybersecurity incidents and breaches when necessary
• Maintaining documentation of Cybersecurity testing procedures, findings and remediation efforts

• Academic degree in Computer Science, Information Technology, a related field or comparable experience
• Proven experience as a Penetration Tester or Ethical Hacker, with a strong track record of identifying and exploiting vulnerabilities
• In-depth knowledge of network protocols, operating systems and web application security
• Proficient in using security testing tools, such as Burp Suite, Metasploit, Nessus, Nmap or similar
• Familiarity with common security frameworks and standards (e.g., OWASP Top 10, NIST, ISO 27001)
• Business fluent English language skills (written and spoken)
• Excellent problem-solving skills and the ability to think creatively to identify potential security risks
• Good verbal and written communication skills, with the ability to clearly articulate complex security issues to both technical and non-technical stakeholders
• Relevant certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP) or Certified Information Systems Security Professional (CISSP) are highly desirable

Applications from severely handicapped people are welcome.

The job in numbers: You are going to work 37.5 hours a week in a team of 15. We offer 30 days of vacation per year.

Being part of a global IT team of thousands of colleagues working on various innovations and tasks, there is always an opportunity to grow and move into different directions within our corporation.

On top of that you can expect the following benefits:

• Individual development planning based on your personal needs and targets (e. g. mentoring, trainings or global internal Software Academy)
• Work from home up to 2 days a week (unless workshops etc. require physical presence)
• Option to work from other EU countries up to 40 days per year
• Possibility of part-time contract up to 80 %
• Agile and collaborative workstyle
• Opportunity to make a difference
• Employee discounts
• An international team across 5 locations in a globally active organization
• Company and tariff pension plan
• Health insurance