Senior Offensive Security Expert

This is Adyen

Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition.

For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster.

Senior Offensive Security Expert (Pentester)
The Offensive Security Team is looking for an experienced security puzzle solver, ethical hacker, application breaker, vulnerability explainer, and go-to person for anything related to offensive security. As a driven and proactive Offensive Security Expert, you will focus on validating our platform's security and ensuring we are always one step ahead of the attackers.

What you'll do

• Deeply understand complex and intricate platforms to find design- and implementation vulnerabilities.

• Scope, prepare, and perform full-stack penetration tests to find vulnerabilities in our products or infrastructure components.

• Collaborate with and support our developers in designing structural fixes to identified vulnerabilities and clearly communicate the possible impact to our product teams, engineers, and CTO to build the most secure platform together.

• Work with our blue team to try to evade our security controls, monitoring and alerting to sharpen our defensive capabilities in the form of purple teaming exercises.

• Share your knowledge with the rest of the team and organization, and help mature our Offensive Security Program.

• Research and develop new attack techniques and tooling that can be used to streamline our security assessment process and results.

Who you are

• At least 5 years of offensive security experience with defining and executing testing scopes on different technology stacks.

• Experienced in organizing or participating in red-teaming engagements - in line with DORA/TIBER.

• Able to effectively communicate, network, and manage expectations and test outcomes to (non-technical) stakeholders and product teams.

• You enjoy supporting and collaborating with developers in not only reporting but also in finding structural solutions for vulnerabilities that you find, always striving for good, secure outcomes.

• Ability to efficiently use and navigate open-source tooling and Linux/MacOS environments.

• Good understanding of mitigation options in an enterprise environment.

• Experience with testing containerization technology, payment systems, or relevant certifications (OSCP, OSWE, OSEP, CRTP, CRTO) is a plus.

• A continuous learner who enjoys staying on top of the latest threats within the Fintech

Our Diversity, Equity and Inclusion commitments

Our unique approach is a product of our diverse perspectives. This diversity of backgrounds and cultures is essential in helping us maintain our momentum. Our business and technical challenges are unique, and we need as many different voices as possible to join us in solving them - voices like yours. No matter who you are or where you’re from, we welcome you to be your true self at Adyen.

Studies show that women and members of underrepresented communities apply for jobs only if they meet 100% of the qualifications. Does this sound like you? If so, Adyen encourages you to reconsider and apply. We look forward to your application!

What’s next?

Ensuring a smooth and enjoyable candidate experience is critical for us. We aim to get back to you regarding your application within 5 business days. Our interview process tends to take about 4 weeks to complete, but may fluctuate depending on the role. Learn more about our hiring process here. Don’t be afraid to let us know if you need more flexibility.

This role is based out of our Amsterdam office. We are an office-first company and value in-person collaboration; we do not offer remote-only roles.