Your area of work



As a working student of the Business Acceptance Unit, you will participate in the IT Security Test for Eurex Clearing AG. You will be performing tests to ensure the compliance to the industrial security standards and the Application development security standards. You will be working with a wide range of stakeholders and different teams. With a good knowledge of computer security, incl. forensics, and system analysis you are responsible for performing the various test activities.




Your responsibilities:

• You will define penetration test approach, test environment requirements and test environment including infrastructure requirements


• You will review security documents and vulnerabilities from technical perspective to assess exploit potential and document findings and remedies to define the scope of penetration test


• Additionally, you will compile findings into status reports and presentations, which are used as the foundation for managerial decision-making


• You will come up with suggestions to be implemented as measures to reduce the security risks and defects identified as part of penetration tests


• You will utilize offensive toolsets such as BurpSuite and Kali Linux to safely analyze and penetration test Business applications, documenting steps and procedures to produce usable vulnerability assessments for the customer


• You will perform review of security scans and penetration tests


• Furthermore, you will construct intricate attack penetration test scenarios with your team for inter-components and across applications interfaces and produce security evaluations

• You have experience with one or more scripting languages such as Bash, Python or Perl


• You have a solid understanding of modern web application stacks and knowledge of automating testing of applications


• Additionally, you have programming experience in one or more languages, experience in HTLM/CSS, Javascript or SQL, including an understanding of their weaknesses


• You are familiar with security frameworks like OWASP and ISO27k


• You show a high level of commitment, self-responsibility, agile working techniques, and enjoyment of working in multidisciplinary co-located teams. You have the ability to work independently as well as part of a team


• You have strong analytical and problem-solving skills


• Furthermore, you have excellent communication skills including presentation skills in English, German would be an advantage