B
Pentester Senior / Red Team
Contract type
Ongoing
Work mode
Hybrid · 3 days/week in office · Paris, France
Experience
Senior · 5+ years
Job description
Lead the offensive security practice as a hands-on Pentest / Red Team lead, building the Red Team unit and growing the team while staying on the ground.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Hybrid · 3 days/week in office · Paris, France
- Languages
- French – fluent
What you'll do
- Take technical responsibility for all offensive missions while staying hands-on.
- Own mission quality: technical scoping, methodology, review and validation of reports before delivery.
- Run Red Team operations end to end: scenario, attack infrastructure, evasion, COMEX debrief.
- Remain an active pentester across web, Active Directory, mobile and industrial for a significant part of the time.
- Grow the team: upskilling juniors, certification paths, sharing techniques.
- Evolve offerings and tools: continuous pentest, report templates, internal tooling, watch.
- Support pre-sales: technical calls with prospects and scoping/pricing of engagements.
What we're looking for
- At least 5 years of pentest experience, including real Red Team operations.
- Strong experience in Active Directory compromise and web pentesting.
- Red Team operations conducted in real conditions: C2, EDR bypass, social engineering.
- Impeccable written French.
- Ability to explain an attack chain to a CISO as well as to a CEO.
- Flexible remote work but presence in Paris required.
- Good chemistry with the team; atmosphere matters as much as technical level.
Nice to have
- Offensive certifications (OSCP, OSEP, CRTO, OSWE or equivalent).
- Experience in a PASSI framework or sensitive environments.
- CVEs, articles, talks, open source tools.
Your team
Pentest / Red Team
Team of 7 consultants in Paris split into an attack team (pentest / Red Team) and a defense team developing Trapster.
Benefits
- Join a team of 7 consultants where your technical choices become the standard, with direct access to the founder.
- Varied missions (web, Active Directory, mobile, industrial) with long-term client relationships showing real impact.
- Dedicated R&D time for your tools, vulnerability research or preparing a talk.
- Annual training and certification budget (OSEP, CRTO, OSWE…), taken during working time.
- Remote work possible, with 2 to 3 days per week in the Paris offices.
- Standard benefits: permanent cadre contract, health insurance, provident scheme, transport, meal vouchers.
How to get hired
- 1The founder handles the recruitment end to end; no agency, no automatic screening.
- 2Every application is read and studied carefully; it may take some time, so feel free to follow up.
Apply
About Ballpoint
Offensive security consultancy of 7 consultants in Paris, ISO 27001 certified and in the process of PASSI qualification.
Consultancy with an attack team (pentest / Red Team) and a defense team developing Trapster, accompanying clients over the long term.
Mission
Durably raise the security level of clients, not just list their flaws.
Key facts
- 7 consultants
- Paris
- ISO 27001 certified and in the process of PASSI qualification.
- Two teams: attack (pentest / Red Team) and defense (Trapster development).
- Accompanies clients over the long term: Red Team, continuous pentest, retests.
What they value
- Curiosity: the art of digging beyond tools.
- Everyone makes a difference; a good idea has no rank.