Base-IT GmbH

Security Engineer

• Plan and conduct internal and external penetration tests
• Conduct web, application, API, and AI/LLM penetration tests
• Conduct OT penetration tests
• Analyze traditional IT infrastructures, networks, Active Directory environments, and cloud environments from various vendors
• Conduct network, port, and vulnerability scans
• Verify and exploit identified vulnerabilities
• Simulate privilege escalation, lateral movement, and credential access
• Conduct password and credential assessments
• Assess modern client and server infrastructures, as well as relevant security and hardening baselines
• Conduct OSINT and dark web research
• Plan and implement phishing and social engineering simulations
• Conduct realistic red team and adversary simulations
• Perform purple teaming and jointly validate detection and response mechanisms
• Assess detection gaps in EDR, XDR, and SIEM solutions
• Create reproducible proofs of concept and technical scripts
• Document and assess identified vulnerabilities and attack paths
• Prepare technical reports, management summaries, and prioritized recommendations for action
• Present findings in technical debriefings and customer workshops
• Collaborate with international clients

Senior Consultant – Red Team Operator, Pentesting & Offensive Security