{"id":106897,"url":"https://alion.io/job/nxp-red-team-pentester","title":"Red Team PenTester","company":{"id":17368,"name":"NXP Semiconductors","domain":"nxp.com","url":"https://alion.io/company/nxp","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":200,"ghost_share":0,"stale_share":0.92,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":32000,"max_usd":77000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"Impacket","optional":false},{"name":"Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false},{"name":"C#","optional":true},{"name":"JavaScript","optional":true},{"name":"Red Teaming","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-07-13T00:00:00Z","employer_posted_date":"2026-07-13","last_verified_at":"2026-10-17T21:08:53Z","board_verified":true,"closed_at":null,"days_open":96,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":96},"description":"About the Role\nWe’re seeking a highly skilled Penetration Tester with hands-on offensive security experience to join our growing security team. In this role, you will assess the security posture of web applications, networks, cloud platforms, and internal infrastructures through realistic attack simulations.\nThis position is ideal for someone who enjoys challenging technical work, thrives in hands-on exploitation, and can translate findings into clear, risk-based guidance for both technical and non-technical audiences.\n Key Responsibilities\nPerform web application, API, network, and infrastructure penetration tests\nIdentify, exploit, and document security vulnerabilities in real-world scenarios\nConduct manual testing beyond automated scanners\nExecute adversary-style attack chains (lateral movement, privilege escalation, AD abuse)\nPerform source code reviews (where applicable)\nAssess cloud environments (AWS, Azure, GCP) for common configuration and architectural weaknesses\nProduce high-quality reports with clear technical detail and business impact\nPresent findings and remediation guidance to engineering and management teams\nSupport remediation, mitigation validation, and retesting\nStay current with vulnerabilities, exploit techniques, TTPs, and offensive security research Required Skills & Experience\n Technical Skills\n3+ years of hands-on penetration testing / offensive security experience\nStrong understanding of: oWeb vulnerabilities (OWASP Top 10, API security issues) oInternal network and infrastructure attack techniques oActive Directory exploitation (Kerberoasting, delegation abuse, ACL misconfigurations, NTLM relay) oPrivilege escalation on Windows and Linux\nExperience using core offensive tools: oBurp Suite, Nmap, Metasploit oBloodHound, CrackMapExec, Impacket\nSolid understanding of foundational concepts: oTCP/IP, DNS, HTTP(S) oAuthentication (Kerberos, NTLM, OAuth2, SSO)\nComfortable working in: oLinux & Windows environments oBash, PowerShell, and basic Python scripting\nStrong reporting skills (technical clarity + business impact) Soft Skills\nExcellent verbal and written communication skills\nAbility to explain risks to both technical and non-technical stakeholders\nSelf-driven, curious, and proactive\nEffective time management across multiple engagements\nProfessional client-facing demeanor\n Nice to Have\nCertifications: OSCP, PNPT, CRTO, OSWE\nRed Team / adversary simulation experience\nCloud penetration testing experience\nSource code review skills (Java, C#, Python, JavaScript)\nThreat modeling and attack path analysis\nExperience with EDR/AV evasion techniques (ethical/lab settings).\nCreating Secure Connections and Infrastructure for a Smarter World\nNXP Semiconductors N.V. (NASDAQ: NXPI) makes products and environments safer, more sustainable, and more secure with innovative connectivity and edge processing solutions for a smarter world.\nWe are in the business of better. Not just better technologies, but better innovations to improve society. As the world leader in secure connectivity and processing solutions for embedded applications, NXP is solving the world’s most complex technology challenges to accelerate business innovation, enhance how we work, and advance how we live.\nReady to create a smarter world? Visit our career website and follow us on social: LinkedIn, Facebook and Twitter.\nWhat can you expect\nContract: This is a fulltime position with a permanent contract\nCompensation: Besides a good salary, you will be eligible for our bonus plan and receive lunch vouchers, 25 vacation days and the possibility to buy company shares with a 15% discount. We also have flexible work hours and a work from home policy.\nDevelopment opportunities: We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills.\nOur office: We are based in one of the high tech hubs in Bucharest with easy access to public transport and restaurants and parks close by. We have many relaxation areas on-site, including a little library where you can borrow books, sofas to relax in a quiet place and a cafeteria and restaurant in our common area.\nHiring process: Applying only takes a minute! Fill in the online application and share your CV with us. After a positive screening based on your CV you will have an initial phone or video conversation with our Talent Acquisition Consultant followed by several business interviews. Here are some useful tips to help you prepare.\nAnd more: Life at NXP is more than work alone. We like to start our day with a free coffee and chat with a colleague and on Thursdays we have fresh fruits for all employees. Join us at one of the many social activities that are organized by and for employees such as our Christmas parties, our employee children’s party and food fairs. Or help us give back to society by donating blood or collecting clothes and food for children in need.\nWhat’s next\nCandidates are invited to apply on our career page with the resume and motivation letter in English for one or several open jobs at the same time.\nAt the application stage, all candidates should have a valid visa and work permit to work in Romania.\nIf you’re excited about this opportunity, we kindly invite you to apply!\nPlease note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.\nMore information about NXP in Romania...\n#LI-9ccb","description_format":"text","description_chars":5633,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Cafeteria","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Processors, MCUs & AI Chips","RF & Wireless Hardware","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-07-13T00:00:00Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.308,"p_room":0.28,"age_days":96,"expected_fill_days":34,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/nxp-red-team-pentester","json_url":"https://alion.io/job/nxp-red-team-pentester.json","meta":{"generated_at":"2026-10-17T23:42:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2056,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17368},"rest":"https://alion.io/mcp/rest/get_company?id=17368"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnxp-red-team-pentester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnxp-red-team-pentester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnxp-red-team-pentester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nxp-red-team-pentester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnxp-red-team-pentester"}]}