Introduction to the jobASML relies on complex digital, industrial, and product environments to enable innovation at scale.
Om in aanmerking te komen voor een sollicitatiegesprek, dient uw sollicitatie volledig in lijn te zijn met de functiespecificaties zoals hieronder beschreven.
Within Ethical Hacking Services, we perform independent, authorized security assessments to help protect ASML's products, services, intellectual property, operations and data.As an Ethical hacker, you will perform penetration tests and security assessments across applications, infrastructure, and cloud environments.
We value the diverse expertise within the team, and if you have a solid background in areas such as product security, OT/ICS, adversary simulation, AI, or emerging technologies, you will have the opportunity to apply those skills on specialized engagements.Role and responsibilitiesIn this role, you will:Plan and conduct authorized security assessments across a diverse range of technologies, systems, and environmentsLead intake: clarify objectives, identify dependencies, define scope, select an appropriate test approach, and agree with rules of engagement with relevant stakeholdersProduce clear technical reports and executive-ready summaries that explain evidence, impact, root cause and practical remediation optionsPresent findings to technical and non-technical stakeholders, align corrective actions, and perform re-assessments to verify remediation effectivenessCollaborate with developers, engineers, and security stakeholders to identify, prioritize, and remediate security risks, while maintaining the independence and objectivity of security assessmentsImprove testing methodologies, automation, knowledge assets, tooling and service processes; share lessons learned and contribute to team capability development.
Share security knowledge and real-world insights by creating and delivering awareness content, training, and workshops that promote a strong security culture across the organization.Education and experienceWe are looking for experienced pentesters who can work independently, make sound technical judgments, and communicate risks clearly.3+ years of experience in penetration testing, ethical hacking, or a closely related offensive security roleFamiliarity with testing web applications, thick clients, VDIs, APIs, web services, AI, and performing source code reviews in multiple programming languagesThreat modeling and architecture reviews with software solutions is a plusExperience testing GenAI applications and LLM modelsA degree in cybersecurity, computer science, engineering or a related technical discipline is preferred; equivalent professional experience is also valuedPreferred certifications:Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN) or comparable hands-on penetration testing certification; Offensive Security Web Expert (OSWE), GIAC Web Application Penetration Tester (GWAPT) or comparable application security certification; Certified Red Team Operator (CRTO), Certified Red Team Professional (CRTP) or comparable red teaming / adversary emulation certification; relevant SANS, cloud, mobile, OT/ICS or product security training and certificationsSkillsDepth in one or more core domains: web, infrastructure, cloud security testingProgramming experience in one or more languagesAbility to validate findings manually, reason over attack paths, and avoid overreliance on automated toolingGood time management skills; the ability to commit and adhere to time-sensitive deliverablesClear communication with both technical and non-technical stakeholdersAbility to conduct scoping and closure meeting calls, be the main point of contact, lead report generation activities, and be the main interface with stakeholders on security assessmentsNice to have: AI/LLM security testing, OT/ICS security, product security, reverse engineering, hardware security, source-code review, exploit development, or adversary emulationOther informationSome work may require onsite presence, cross-time-zone coordination, or limited travel.This is a pipeline vacancy, and we welcome applications from candidates across different seniority levels, including junior, mid-level, and senior profiles.The position is open to candidates residing in the Netherlands or the European Union, with eligibility to work in the relevant location.Inclusion and diversityASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce.
It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity.
We recognize that inclusion and diversity is a driving force in the success of our company.Need to know more about applying for a job at ASML? xbelvxb Read our frequently asked questions.SummaryLocation: Veldhoven, NetherlandsType: Full time
Ethical hacker in Tilburg werkgever: ASML Holding
ASML is een uitstekende werkgever die zich inzet voor de veiligheid en ontwikkeling van zijn medewerkers binnen de dynamische omgeving van de EUV-fabriek in Veldhoven. Met een sterke focus op inclusie en diversiteit, biedt ASML niet alleen een stimulerende werkcultuur, maar ook volop mogelijkheden voor persoonlijke groei en professionele ontwikkeling. Werken bij ASML betekent deel uitmaken van een team dat samenwerkt aan innovatieve technologieën, terwijl je bijdraagt aan een veilige en productieve werkomgeving.
