Ethical Hacker

Our mission is clear: to enable businesses to operate securely. With over 275 dedicated specialists, Northwave works daily on innovative cybersecurity solutions that truly help organizations move forward. We operate from our headquarters in Utrecht and offices in Germany, Sweden, and Belgium.
Northwave brings together ethical hacking, behavioral psychology, and top-level security management. We respond to threats, and anticipate them - through 24/7 managed security services and tailored specialist solutions.
Joining Northwave means stepping into an environment where innovation and results go hand in hand. Whether you excel in technical testing or strategic client communication, you’ll have the freedom to help shape the future of digital security and make a real impact.

Northwave’s Red Team lives for hacking. Our team consists of 15+ hackers from all over the world, with diverse backgrounds and expertise. We focus solely on challenging pentests and realistic red teaming operations that enhance the digital resilience of organizations across Europe.
We collaborate with our Blue Team, Threat Intelligence, Reverse Engineering, and CERT to create realistic, high-value attack scenarios. In addition to our mature services, we are a highly regarded TIBER and ART provider, making our work consistently exciting and cutting-edge.

As an Ethical Hacker, you help our clients identify and understand vulnerabilities before malicious attackers can exploit them. You will work on a variety of penetration-testing assignments, covering areas such as web applications and APIs, internal and external infrastructure, Active Directory, Microsoft cloud environments and other technologies. We match assignments to your experience while giving you opportunities to broaden your technical skills.
You will be involved throughout the engagement. Together with colleagues and the client, you define the scope and testing approach, perform the technical assessment and document your findings. You determine how vulnerabilities can be exploited, assess their potential impact and translate the results into clear, practical recommendations. You will also contribute to reports, discuss findings with clients and, where applicable, verify whether vulnerabilities have been resolved.
You do not need to know every technology or be an experienced red team operator when you join. You will work alongside experienced colleagues who review your approach, challenge your thinking and help you develop. As your knowledge and confidence grow, you will take more ownership of assignments and can specialise in the areas that interest you most.
Depending on your experience, skills and ambitions, you may also contribute to red team and purple team engagements. This could include activities such as Active Directory attack-path testing, reconnaissance, social engineering or working towards a broader attack objective. Red teaming is a possible development path within the role, rather than a requirement from day one.

Competitive salary, paid on the 25th, with annual review and 8% holiday allowance

Generous special leave for marriage, birth, bereavement, care and pregnancy

Lease car based on salary scale (electric options available), or choose €0.25/km plus 50% lease budget as a mobility allowance

Mac Book, phone and accessories fully provided

€200 net annual allowance for flexible and remote working

Alleo budget for sports, wellness and leisure activities of your choice

Referral bonus for bringing in a new colleague

Hybrid working from a modern office in Utrecht

Personal growth through the Role Model and Feed Forward cycle, with your ambitions and development at the center

Initial hands-on experience performing…