NVISO logo

Junior Penetration Tester/Red Teamer (m/w/d)

NVISO • Vienna, Austria

onsitefull-time

Salary: €54,000 - €59,000 / year

Posted Jan 28, 2026

Role & seniority: Junior Penetration Tester (entry to mid-level) based in Germany or Austria

Stack/tools: ICT systems, networks, and security technologies; operating system security concepts; payload crafting (C++/C#, Win32 API, AV/EDR evasion) a plus; Active Directory or Entra ID a plus; phishing, social engineering, and red-team style testing

Top 3 responsibilities

  • Simulate attacker actions and test client defenses by blending technical and non-technical methods

  • Design, develop, and recommend security solutions; advise on network/system/application architecture changes

  • Prepare reports on information security adherence; provide policy/procedure recommendations; assist with compliance objectives

Must-have skills

  • Citizenship in a NATO member state; Bachelor’s or Master’s degree (or equivalent experience)

  • Solid knowledge of ICT systems, networks, and security technologies; OS security concepts

  • Ability to work independently; strong teamwork, communication (German and English)

  • Discretion with confidential information

Nice-to-haves

  • Experience with payload crafting (C/C++, Win32 API, EDR evasion)

  • Experience with Active Directory or Entra ID

  • Security certifications or ongoing training (e.g., SANS, CISSP, OSCP)

  • Location & work type: Germany or Austria; full-time, flexible hours with home-office options and occasional international collaboration; some travel possible

Notes: NVISO emphasizes a mission-driven, no-nonsense environme

Full Description

Are you already experienced in the world of security or at least you have a strong interest in working for a cyber security company? Do you want to become part of an international fast growing tech company? At NVISO you have the opportunity and we look forward to getting to know you! WHO ARE WE?

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!! Tasks You have a strong interest in cyber security and believe the following to be applicable to you?

As a Junior Penetration Tester based in Germany or Austria, you will

  • Fuse technical and non-technical skills to emulate actions that might be taken by a malicious users/systems
  • Understand the psychology, the systems, and the tactics employed by threat actors to proactively test the clients’ system’s ability to detect, react, and adapt to attacks
  • Help with design, development and recommendation of security solutions to protect clients’ proprietary/confidential data and systems
  • Assist with compliance objectives; provide guidance and direction for the logical protection of information systems assets
  • Advice our clients for security whenever they make changes in the network, system and application architecture
  • Prepare reports regarding effectiveness of information security adherence and make recommendations for the adoption of new policies and procedures
  • Get to craft payloads, execute phishing attacks, conduct physical breaches or social engineering
  • Requirements
  • You hold citizenship in one of the 32 NATO member states;
  • You have a Bachelor’s or Master’s degree or equivalent work experience in the field
  • Good knowledge of ICT systems, networks and security technologies
  • Knowledge of operating system security concepts
  • Able to work independently and to deliver results
  • Positive, team and mission-oriented attitude
  • Strong interpersonal and verbal/written communications skills that enable the ability to work effectively in a collaborative team environment
  • Fluent in German and excellent English communication skills, both verbal and written
  • Candidates must recognize and deal appropriately with confidential and sensitive information
  • Experience with payload crafting is a plus (C++/C#, Win32 API, AV/EDR evasion, etc.)
  • Experience with Active Directory or Entra ID is a plus
  • Benefits

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components

  • A training budget of 10,000 EUR plus 10 days paid time off rolling over two years;
  • An attractive base salary range between 54.000 EUR and 59.000 EUR p.a.;
  • Working with and learning from the best people in the European cyber security “scene”. We have several SANS Instructors working for us and we are also represented at popular hacking conferences (BlackHat, BruCON, OWASP, etc.). In addition, our employees can take advantage of prestigious continuing education opportunities (GSE, GXPN, CISSP, OSCP, etc.);
  • A forward-thinking and agile company that supports you in the creation and implementation of new initiatives ;
  • Unique team events (most recently e.g. Lisbon, Dubai, Malta);
  • A sophisticated coaching concept starting on day 1;
  • 30 days of vacation;
  • Flexible working hours and home office options (Working Abroad Option);
  • Cost absorption for the Klimaticket;
  • Company bike leasing.
  • Disclaimer on the Use of AI Tools in the Application Process
  • Please be aware that the creation and submission of application documents (e.g. CV, cover letter, case studies, etc.) using AI-powered tools is only permitted to a limited extent.

Our expectations

  • Application documents must authentically reflect your own qualifications, personality, and motivation.
  • The use of AI for supportive purposes (e.g. spell-checking, improving wording) is acceptable.
  • Fully generated application documents created by AI without personal adaptation or review are not permitted.
  • Under no circumstances may NVISO information, data, or documents be uploaded to or processed by external AI tools.
  • We reserve the right to exclude applications from the selection and interview process that are clearly created primarily or exclusively by AI and show no recognizable personal input.
  • The purpose of this policy is to ensure a fair and transparent recruitment process and to obtain an authentic impression of our applicants.
Penetration TestingRed TeamingCyber SecurityEmulating Malicious UsersThreat Actor Tactics UnderstandingSecurity Solution DesignCompliance AssistanceInformation System ProtectionSecurity AdvisingReport PreparationPayload CraftingPhishing AttacksPhysical BreachesSocial EngineeringICT Systems KnowledgeNetwork Securitymulti-location

Cookies & analytics consent

We serve candidates globally, so we only activate Google Tag Manager and other analytics after you opt in. This keeps us aligned with GDPR/UK DPA, ePrivacy, LGPD, and similar rules. Essential features still run without analytics cookies.

Read how we use data in our Privacy Policy and Terms of Service.