Internal Offensive Security Expert (Pentester)

<p><strong>This is Adyen<br/></strong></p> <p>Adyen provides payments, data, and financial products in a single solution for customers like Facebook, Uber, H&amp;M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition. </p> <p>For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. The people of Adyen are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster.</p> <p><br/><strong>Internal Offensive Security Expert (Pentester)<br/><br/></strong>Adyen is currently experiencing exponential global growth, handling millions of transactions every single day. Security is an integral part of our culture and every team has their own Security responsibilities, both explicitly and implicitly defined.<br/><br/>As a driven and pro-active Internal Offensive Security Expert you will be part of the Platform Security team, which focuses on securing our platform for our merchants and shoppers to trust us with their most sensitive information.<br/><br/>Following Adyen’s formula, we design, build and maintain our platform in-house. This brings many benefits but also challenges. Your main goal will be to deeply understand a very complex and intricate platform to find both design and implementation flaws and show some of our most brilliant engineers how we can build the most secure platform together.<br/><br/>Think out of the box, forget about consultant-oriented reports and think about automation, about bringing value and getting things done.<br/><br/><br/><strong>What you’ll do</strong></p> <ul> <li>You will perform full-stack penetration testing to detect flaws in our platform</li> <li>Embed yourself in multiple engineering teams across the organization to understand their challenges, processes and detect process flaws</li> <li>As part of your assessment activities, you will work with our developers to provide knowledge transfer and to actively improve our implementations to better protect against attacks</li> <li>You will attempt to evade detection and attempt to defeat the security protections and controls that are configured to stop you.</li> <li>As a purple teamer, actively engage with the Security Engineering team to improve detection, reporting, and alerting</li> <li>As part of the offensive security efforts, build out and maintain a secure lab environment that can be used by multiple teams to test their own applications</li> </ul> <p><strong><br/>Who you are</strong></p> <ul> <li>Sound experience working as a pentester attacking webapps, REST API’s, networks, crypto, and more. Blackbox, greybox and whitebox.</li> <li>Experience in defining testing scopes and properly executing accordingly</li> <li>Proficient with open source tooling and Linux/MacOS environments.</li> <li>Strong communication and networking skills to stay close to the product and development teams. </li> <li>Demonstrated programming language and scripting experience.</li> </ul> <p><strong> </strong></p> <p><strong>What’s next?</strong></p> <p>Ensuring a smooth and enjoyable candidate experience is critical for us. We aim to get back to you regarding your application within 5 business days. Our interview process tends to take about 4 weeks to complete, but may fluctuate depending on the role. <a href="https://careers.adyen.com/how-we-hire">Learn more about our hiring process here</a>. Don’t be afraid to let us know if you need more flexibility.</p> <p>Please note that this role is a full-time position in Amsterdam. It will require a relocation in case you live outside of the Netherlands.</p> <p><br/><br/><br/></p>