Offensive Security Researcher, Baobab
+ VSOP options
2+ days a week in office
Cybersecurity insurance provider
Be an early applicant
Cybersecurity insurance provider
21-100 employees
Be an early applicant
+ VSOP options
2+ days a week in office
21-100 employees
Company mission
Baobab's mission is to protect all businesses from cyber attacks by insuring them through cyber security experts.
Role
Who you are
- Proven experience as a Penetration Tester, Offensive Security Engineer, or similar role
- Experience participating in bug bounty programs or CTF competitions
- Strong experience in vulnerability assessment and management, including the triaging and prioritization of findings
- Demonstrable experience in managing, tuning, and improving vulnerability scanning technologies (e.g., Nessus, Qualys, Burp Suite Pro, Acunetix, OpenVAS)
- A keen interest and active involvement in following the bug bounty community, with an understanding of common bug classes and innovative exploitation techniques
- Solid understanding of web application security (OWASP Top 10, etc.), network protocols, operating systems, and cloud security principles
- Experience with scripting languages (e.g., Python, Bash, PowerShell) for automation and tool development
- Strong analytical and problem-solving skills with meticulous attention to detail
- Excellent written and verbal communication skills in English, with the ability to articulate complex technical issues clearly
- A proactive mindset and a passion for continuous learning in the field of offensive security
Desirable
- Relevant certifications such as OSCP, OSCE, GPEN, GWAPT, eWPTX, or similar
What the job involves
- Triage, analyze, validate, and prioritize vulnerabilities identified through automated scanning tools, manual testing, and external reports
- Continuously improve and optimize our vulnerability scanning technologies and processes, including scanner configuration, custom script development, and integration with other security tools
- Proactively search for critical vulnerabilities on a daily basis across our infrastructure, applications, and services, staying informed about newly disclosed CVEs and emerging threats
- Stay at the forefront of offensive security techniques by actively following and researching methodologies, tools, and exploits shared within the bug bounty community and broader cybersecurity landscape
- Plan, scope, and execute comprehensive penetration tests (e.g., web application, network, API, cloud, mobile) to identify security weaknesses
- Develop and utilize custom scripts, tools, and methodologies to enhance penetration testing efforts and automate attack simulations
- Clearly document and communicate identified vulnerabilities, their potential impact, and actionable remediation recommendations to technical and non-technical stakeholders
- Collaborate with development, operations, and infrastructure teams to provide guidance on vulnerability remediation and secure coding/configuration practices
- Retest and validate the effectiveness of implemented security fixes
- Contribute to the development and refinement of internal security testing methodologies and knowledge base
Our take
Most businesses are aware that cyber security software must be used to protect themselves against cyberattacks, but few are aware of the sheer variety of attacks present in today's digital landscape. This makes it increasingly difficult for businesses to equip sufficient protection, resulting in worldwide cyber attacks in 2021 alone costing over $6 trillion.
Baobab insures businesses for cyberattacks, using its team of cyber security experts to assess companies for risk, secure their business, and prevent financial loss. The company's approach to risk assessment not only protects companies against cyber threats themselves but also prevents them from having to spend time, money, and resources on evaluating their own cyber security stack.
Several other cyber security insurance companies seek to protect businesses from cyber threats, but Baobab has taken a unique approach by providing solutions for not just enterprises, but small businesses too. By taking care of this end-to-end process, Baobab is preventing businesses from having to spend time and resources on dealing with cyber security themselves, leaving them with more time to scale.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (2 rounds)
Jan 2023
$3.4m
EARLY VC
Jan 2022
$4m
SEED
Total funding: $7.4m
Company benefits
- We are a rapidly-growing, highly innovative and ambitious startup, backed by leading institutional and private investors
- Opportunity to make a true impact on our journey to becoming the European market leader in cyber insurance
- Work directly with co-founders/senior leadership and have full access to everything that’s going on
- Challenging and supportive working culture, where you are expected to achieve something, but where you can learn a lot and have fun
- Long-term development perspective in a growing company
- Free coffee and fruit in our beautiful office in the heart of Berlin
Company HQ
Mitte, Berlin, Germany
Leadership
Vincenz Klemm
(CEO)Graduated The Johns Hopkins University in 2015. Experience as co-founder of Gabi from 2016 to 2020. Co-founded Baobab as CEO in 2021.
Anton Foth
(CTO)Experience as Engineering Lead and CTO for BCG Digital Ventures. CTO of Coya from 2019 to 2021. Co-founded Baobab as CTO in 2021.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 6 more jobs at Baobab