Red Team/Pentest cybersecurity consultant (H/F)

La mission

Reference Consulting Player in Cybersecurity, Digital Projects, and Artificial Intelligence, HeadMind Partners is committed to building a more secure, resilient, and responsible society. The company is PASSI‑certified (ANSSI). Your Mission within the Offensive Team As part of the Cyber unit and by joining our Offensive Lab, you will help organisations of all sizes (SBF 120, NIS2‑core entities, financial actors under DORA) anticipate cyber‑attacks. You will work on the following portfolio of activities: Advanced Penetration Tests: Web, mobile, thick‑client, API, and micro‑service architectures. Cloud & Hybrid Audits: Assessment of configurations in multi‑cloud environments (Azure, AWS, GCP) and containerised infrastructures (Kubernetes). Artificial‑Intelligence Security: Robustness audits of AI models, penetration testing of applications that embed LLMs (prompt‑injection attacks, model theft) in compliance with the AI Act. Red‑Team / Purple‑Team Operations: Real‑world multi‑vector attack simulations and joint detection exercises with defence teams (SOC / Blue Team). Social Engineering: Advanced phishing, vishing, and physical‑intrusion scenario campaigns. Forensics & Incident‑Response Audits: Post‑compromise analysis and compromise assessment investigations. Life Inside the Offensive Lab As an active member you will: Collaborate daily and share knowledge via our dedicated communication channels and post‑mortem (REX) forums. Take part in internal R&D to develop tomorrow’s offensive tools, automate Red‑Team playbooks, and explore the security of emerging technologies. Disseminate expertise across the Business Unit through technical talks and hands‑on workshops. Benefit from a leading‑edge continuous‑learning programme, certifying you at the appropriate level (e.g., OSCP). Your Profile We are looking first and foremost for passionate offensive‑security professionals who combine technical rigour with a consulting mindset. Education: You hold (or will soon hold) a Master’s degree from a top‑tier engineering school or a leading university, specialised in Cybersecurity or Information Systems. Experience: You have at least one concrete experience (final‑year internship or apprenticeship) focused on offensive topics—penetration testing, complex configuration audits, cyber R&D, or Red‑Team operations. Technical Skills: Solid understanding of core vulnerability concepts (OWASP, logical bugs, AD privilege escalation) and attack methodologies. Strong scripting abilities (Python, PowerShell, Bash) and a good grasp of cloud architectures (AWS, Azure, GCP) are strong assets. Soft Skills: Excellent analytical thinking, high intellectual curiosity, a team‑player attitude, and the ability to present findings in a clear, pedagogical way (customer‑service orientation). Languages: Professional‑level English is required to operate in our international contexts. HEADMIND PARTNERS, 2026 A powerful collective: Over 1 500 consultants, the European leader in digital‑risk advisory. At the heart of trust challenges: Cutting‑edge expertise that blends Cybersecurity, digital transformation, and trustworthy AI (AI Act‑compliant). Large‑scale clients: Strategic engagements with major accounts (CAC 40, SBF 120) and Essential Service Operators. A certified excellence framework: ISO 27001 & ISO 9001 certified environment, an EcoVadis‑labelled CSR excellence programme, and a repeatedly award‑winning corporate culture (Happy at Work, Trainees & Candidates).