Careers
Your Career in Offensive IT Security
Do you want to understand how systems work – and how their protection mechanisms can be defeated? At Rootsektor, you can turn that into an IT security career: you test web applications, networks, mobile apps, and industrial systems using the methods of real attackers and help organizations improve their IT security. Open applications are welcome at any time.
Working at Rootsektor
Careers at Rootsektor – IT security from an attacker’s perspective
Our work begins where automated scanners stop. We test IT systems, applications, and processes the way a real attacker would – creatively, thoroughly, and with a focus on what could actually happen in a real attack. The end result is a report that management and technical teams can both work with.
This requires technical depth, curiosity, and diligence in equal measure. Anyone who works with us gains insight into our clients’ sensitive systems and confidential information. Discretion, a clear ethical compass, and clean documentation are therefore not side issues but part of the craft.
Profiles
Open applications welcome
We’re always happy to receive applications from people who are excited about offensive IT security. The following profiles fit our work particularly well – but your background doesn’t have to match them exactly.
Offensive security
Penetration Tester (m/f/d)
You test web applications, APIs, networks, and Active Directory environments for exploitable vulnerabilities and document your results in a clear, reproducible way.
- Hands-on experience in web or infrastructure pentests, e.g., from projects, CTFs, or your own labs
- Solid understanding of networks, operating systems, and web technologies
- Confident use of common tools – and an interest in understanding their limits
- The ability to write up technical issues clearly and understandably
Consulting
Security Consultant (m/f/d)
You combine technical understanding with consulting and support clients from scoping and the classification of findings through to security strategies and awareness initiatives.
- Experience in IT security, system administration, or IT consulting
- Knowledge of frameworks such as ISO/IEC 27001, BSI IT-Grundschutz (the German Federal Office for Information Security’s baseline protection methodology), or NIS2
- Enthusiasm for explaining complex topics clearly – including in training sessions
- A structured and independent way of working
Students
Student Employees in IT Security
You’re studying computer science, IT security, or a related subject and want to combine theory with practice. You support the team with research, test preparation, scripts and tools, and documentation.
- Enrollment in a relevant degree program
- First experience with Linux, networks, or programming, e.g., in Python
- Interest in attack techniques, CTFs, or your own security projects
- Curiosity, eagerness to learn, and reliability
Application
How to apply
One email is all it takes. Our privacy policy explains how we handle your data.
-
01
Write an email
Send your application to jobs@rootsektor.de – ideally with the subject line “Open application” and the profile you’re interested in.
-
02
Attach your documents
Include your résumé as a PDF and state your earliest possible start date. Transcripts, reference letters, and certifications are optional.
-
03
Our response
We’ll take the time to review your documents and get back to you.
-
04
Getting to know each other
If it’s a good fit on both sides, we’ll get to know each other in an interview – with room for technical topics and for your questions to us.
Your application at a glance
- Résumé as a PDF
- Earliest possible start date
- A few sentences about yourself and the profile you’re interested in
- Optional: transcripts, reference letters, and certifications
- Optional: links to projects, CTF write-ups, articles, or your own tools
Ready for the next step?
Send your open application with your résumé and earliest possible start date to jobs@rootsektor.de. We look forward to getting to know you.
FAQ
Frequently asked questions about applying
Didn’t find your question? Call us at +49 2932 465265-0 or email info@rootsektor.de.
Do I need certifications to apply?
No. Certifications can be good evidence, but they are not a requirement for applying. We’re mainly interested in what you can do in practice and how you approach problems – for example, based on projects, CTF experience, or previous roles.
Can I apply as a career changer?
Yes. Many IT security professionals come from system administration, software development, or networking. What matters are solid technical fundamentals, curiosity, and a willingness to dig into new topics.
Where is the job located?
We’re based in Arnsberg, Germany. Since we work for organizations in Germany and internationally, assessments take place remotely or directly at the client’s site, depending on the engagement. We’ll discuss what this means for your role in a personal conversation.
Do I need to write a traditional cover letter?
Not necessarily. A few sentences about yourself, your motivation, and the profile you’re interested in are enough. An informative résumé and your earliest possible start date are more important.
Questions before you apply?
Want to clarify something first? Write to us using the form or call us at +49 2932 465265-0. Please send your application documents by email to jobs@rootsektor.de.