Pentester Senior / Red Team

Ballpoint, it's 7 consultants in Paris divided into two teams: a pentest attack / Red Team team, and a defense team with the development of Trapster. We are ISO 27001 certified and in the process of PASSI qualification.

With AI, our profession has changed. Finding a vulnerability has never been so accessible: tools and technique are no longer enough to make a difference.

What matters today is understanding the company we are attacking: its business, its critical assets, what would truly bring it to its knees. That's why the Red Team is at the heart of what we do: a realistic attacker, with real objectives, facing an organization and its real challenges.

Our purpose: to sustainably improve the security level of our clients, not just list their flaws.

We are therefore looking for our Head of Pentest / Red Team: the person who will build our Red Team department and grow the team.

Our values

At Ballpoint, we support our clients over the long term: Red Team, continuous pentest, retests. Our consultants know their IT systems as well as their business challenges, and that guides our way of working.

1. Curiosity: the art of digging beyond tools

We cultivate insatiable curiosity to explore unknown technologies and dissect the businesses of our targets, because it is in this fine understanding that the most relevant attack paths reveal themselves.

2. Everyone makes a difference

With us, a good idea has no rank. A script that saves half a day on each mission, a better way to present a finding to the Executive Committee, an offer idea: everyone can evolve our methods, our tools, and our offers. And we expect everyone to do so.

The position

You will take technical responsibility for all our offensive missions, while remaining hands-on. Reporting directly to the founder, you will work with the pentest / Red Team team.

• Ensure mission quality: technical scope, methodology, review and validation of reports before delivery.

• Lead Red Team operations from start to finish: scenario, attack infrastructure, evasion, debriefing to the Executive Committee.

• Remain an active pentester: web, Active Directory, mobile, industrial, for a significant portion of your time.

• Grow the team: junior skill development, certification paths, technique sharing.

• Evolve our offers and tools: continuous pentest, report templates, internal tooling, market watch.

• Support pre-sales: technical calls with prospects and cost estimation of perimeters.

Your profile

You have at least 5 years of pentesting experience, including real Red Team operations, and the desire to advance a team.

Essential

• Solid experience in Active Directory compromise and web pentesting.

• Red Team operations conducted under real conditions: C2, EDR bypass, social engineering.

• Impeccable written French.

• The ability to explain an attack chain to a CISO as well as a CEO.

• Flexible remote work arrangements but presence in Paris required.

• Good team chemistry: we spend a lot of time together, on missions and in the office, and the atmosphere is as important as the technical level.

A plus

• Offensive certifications (OSCP, OSEP, CRTO, OSWE or equivalent).

• Experience in a PASSI framework or sensitive environments.

• CVEs, articles, talks, open-source tools.

Benefits

You will join a team of 7 consultants where your technical choices become the norm, with direct access to the founder and a clear mission: to evolve our Red Team department. The missions are varied (web, Active Directory, mobile, industrial…), and as we follow our clients over the long term, you see the real impact of your work from year to year.

Ballpoint is evolving rapidly, and you are a direct player in it. Your ideas have a visible effect from the following week, not after six months of committees.

• R&D Time: dedicated time for your tools, vulnerability research, or preparing a talk.

• Training and certifications: an annual budget (OSEP, CRTO, OSWE…), taken during your working hours.

• Remote Work: possible, with 2 to 3 days per week in our Paris offices.

• The classics: CDI cadre (permanent executive contract), health insurance, provident fund, transport, meal vouchers.

The process

The founder manages this recruitment from start to finish. No agencies, no automatic sorting: every application is read and studied with attention. This may take some time, so don't hesitate to follow up.