Back to Jobs
Expert en tests de pénétration et d'intrusion
MC Expert
Gosselies, Belgiumhybridcontractsenior
We are looking for a Penetration and Intrusion Testing Expert for a full-time mission estimated to last around 10 days, starting as soon as possible. The role involves validating a new system image and several new laptop models as part of the migration to Windows 11, with a mix of on-site and remote work.
Description (English)
Mission Terms
As part of our activities, we are looking for a Penetration and Intrusion Testing Expert. This is a full-time mission estimated to last ~ 10 days and will start as soon as possible. Part of the mission can be done remotely in agreement with the manager, but a presence at the Gosselies site for at least 2 days per week is mandatory. Additional days on-site may be requested depending on service needs. The Gosselies site is not easily accessible by public transport, so having a driver's license and a vehicle will be preferable for travel.Mission Context
You will be part of the Information Security Office team.Main Tasks:
As part of the migration project to Windows 11, a new system image and several new laptop models must be validated before deployment in production. The goal of the penetration test is to assess the security robustness of the Windows image, associated hardware configurations, and native protection mechanisms (TPM, Secure Boot, BIOS/UEFI hardening, Defender, etc.). This test aims to provide assurance that the deployed endpoints meet internal security requirements and limit the risk of privilege escalation, local compromise, or secret extraction.Target Machines:
•1xT16 migration windows 10 -> windows 11,
•1xT16 Windows 11
•1xDell Pro 16 Plus Windows 11
Windows 11 Image
•System configuration (GPO, baselines, hardening).
•Defender/antivirus/EDR settings.
•Local attack surface (rights, services, configurations).
•Encryption (BitLocker).
•Boot processes (Secure Boot, UEFI Lockdown).
•Internal versioning and packaging.
•Etc...
Hardware
•Activation and robustness of TPM 2.0.
•Securing UEFI/BIOS (passwords, disabling external boot ports).
•Testing on interfaces (USB, Thunderbolt).
•Verification of BitLocker key erasure mode via hardware events.
•Etc...
Connectivity
•Testing in connected / disconnected mode.
•MDM posture – onboarded machine (Intune)
Recommended Tests
•Security configuration analysis (Windows 11 baseline).
•Local privilege escalation tests (non-destructive).
•Bypassing security policies (Defender, SmartScreen, SRP/Applocker).
•Verification of secret protection (LSA Protection, Credential Guard...).
•Analysis of isolation mechanisms (sandboxing, AppContainer).
•Verification of local network hardening (firewall, open services).
•Testing on hardware protections (Secure Boot, TPM misuse).
•Non-intrusive persistence attempts.
•Etc...
Desired Profile
The required technical skills and associated seniority levels are listed in the Connecting Expertise skills section.From a soft skills perspective, the consultant is expected to be:
•Autonomous
•A good communicator
•Flexible
•Able to simplify technical points for the Business
•Good at writing summary documents
•Capable of assessing the severity of discovered vulnerabilities
•Able to synthesize and communicate effectively with both the Business and a technical team
The position requires administrative rights or access to classified information, making it high-risk for information systems. Therefore, in compliance with ISO27001 standards, we are required to verify backgrounds by contacting at least one reference provided for any candidate selected for the mission. If your candidate is selected for an interview, you will be asked to provide the contact details of one or more previous managers at the end client (recent experiences) for contact. The communication of these references constitutes agreement by the candidate and the mentioned person(s). This data will be deleted after 2.5 years following the end of collaboration or after a maximum of one and a half years if the recruitment process is unsuccessful.
The mission is set to start on 13/04/2026, with interviews scheduled for 08/04/2026 in the morning. Please block this time slot with the proposed consultants. To move forward quickly after the interviews, we ask that you include the contact details of the reference person in the submitted proposal. This person will be contacted in case the consultant is selected.
Competitive
Job Info
Type
contract
Level
senior
Work
hybrid
Salary
Competitive
Posted
Mar 30, 2026
Start Date
Apr 13, 2026
Deadline
Apr 3, 2026
Tech Stack
Windows 11TPM 2.0Secure BootBitLockerUSBThunderbolt