Offensive Security Specialist (m/f/d)

What we offer

Explore a world of opportunities with us. Look ahead with us and help shape innovative solutions to make our world more sustainable and life healthier, more vibrant and more comfortable. At Evonik, you have the chance to explore, thrive, and grow alongside 33,000 colleagues. Among attractive career paths and high-quality development programs, we not only offer performance-based remuneration and occupational health benefits but also hybrid and flexible working environments with #SmartWork. Bring your fresh perspective, develop your strengths, break out your mold, and find a career that fits your dreams with us.

Click on the link below to learn what our employees have to say about Evonik:

https://careers.evonik.com/en/about/meet-the-team/

Expected Responsibilities:

Conducting offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems.

Planning, executing, and leading advanced penetration tests for:

• Custom and third-party web applications

• Complex enterprise applications (e.g., ERP, legacy systems, industrial platforms).

• Cloud-native and hybrid architecture.

Documenting findings in high-quality technical reports, including:

• Clear risk ratings

• Business impactanalysis

• Actionableremediationrecommendations

Presenting results to technical and non-technical stakeholders, including engineering teams, management, and customers.

Advising onrisk mitigation strategies, secure design principles, and defensive improvements.

Professional Experience & Background

• Successfully completed university degree in (Business) Informatics, Computer Science, or a comparable IT-related field - or equivalent professional experience.

• Hands-on experience in:

• Web applicationpenetrationtesting

• Infrastructure and network penetrationtesting

• Security testing of complex, business-critical applications

• Experience working in industrial or chemical company environments is a plus.

Technical Skills & Knowledge

• Strong understanding of Windows and Linux client/server environments.

• Practical experience with cloud platforms, including identity, networking, and cloud-native services.

• In-depth knowledge and hands-on usage of offensive security tools.

• Knowledge of secure software development lifecycle (SSDLC) and common vulnerability classes (e.g., OWASP Top 10).

• Programming and scripting skills are a plus.

• Experience with Red Teaming, adversary simulation, and attack-chain methodology.

• Familiarity with source code review and static/dynamic application security testing.

• Knowledge of OT / ICS security is desirable.

Your Application

To ensure that your application is proceeded as quickly as possible and to protect the environment, please apply online via our careers portal. Further information about Evonik as Employer can be found at www.evonik.com/en/careers.html.

Please address your application to the Talent Acquisition Manager, stating your earliest possible starting date and your salary expectations.

Your Talent Acquisition Manager:

Company is