Security Consultant - Penetration Testing

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

With more than 52,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.
A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

About Atos Group

Atos Group is a global leader in digital transformation with c. 54,000 employees and annual revenue of c. €7.2 billion, operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

Security Consultant

Core Responsibilities & Technical Requirements

• Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements, eg MAS TRM, OWASP MSTG

• In-depth knowledge of iOS/android architecture, including their underlying security mechanisms

• Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications.

• Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent.

• Knowledge of RM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.

• Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning, root/jailbreak detection, anti [tampering, in-app VPN, etc).

• Ability to develop BURP extensions to aid with mobile and web application tests.

• Solid experience conducting Web Application Penetration tests following industry standards methodologies.

• Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend). • Web & Infrastructure Security Testing

Qualifications & Skills

• Bachelor’s degree in Computer Science, Information Security, or related discipline.

• Minimum 2 years of hands-on penetration testing or relevant offensive security experience. .

• CREST CRT certification mandatory.

• Additional certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, Artificial Intelligence security credentials are advantageous.

• Excellent oral and written communication skills, including the ability to present technical findings.

• Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.

• Self-motivated, proactive and able to work independently or as part of a team. 

Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.

Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment. 

Choose your future. Choose Atos.