IT Security AI-Redteamer

DKB Code Factory GmbH; España; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

DKB Code Factory GmbH is seeking an experienced security professional to lead offensive security initiatives. You will perform AI-assisted red team activity across web apps, APIs, and cloud, producing prioritized remediation guidance for complex environments and communicating findings to technical and executive stakeholders.

The role requires hands-on testing with OWASP/API Top 10, CVSS, secure SDLC concepts, and strong scripting/automation in Python or Bash.

Formación

• Hands-on red team or offensive security testing across web apps, APIs and cloud.
• Strong knowledge of OWASP Top 10 and API security principles.
• Experience with AI-assisted offensive tooling and ML/NLP in workflows.
• Proficient with security tools: Burp Suite, ZAP, Nmap, Metasploit, Nessus/OpenVAS, Kali Linux.
• Cloud security knowledge (AWS) with Kubernetes and container security basics.
• Scripting and automation in Python/Bash; CI integration in Git/GitLab CI.
• Excellent written and verbal communication in English; familiarity with regulated contexts.

Responsabilidades

• Plan and execute AI-assisted red team engagements across web apps, APIs, cloud and infra.
• Deliver prioritized technical reports and executive summaries; guide remediation.
• Tune offensive tooling and build automation to reduce manual triage and false positives.
• Integrate security checks into CI/CD pipelines for continuous testing.
• Run remediation workshops and create reusable runbooks for teams.
• Coordinate with SOC, IT Ops, product teams and central IT Security; support governance mapping.

Conocimientos

Red team ops

Offensive security

Web apps security

APIs security

Cloud security

Secure SDLC

Threat modeling

Python

Bash

CI integration

English fluency

Financial services knowledge

Herramientas

Burp Suite

OWASP ZAP

Nmap

Metasploit

Nessus/OpenVAS

Kali Linux

AWS

Kubernetes

Git/GitLab CI

OpenSearch

Grafana

Descripción del empleo

Job Summary

Use AI driven offensive security techniques to proactively identify, validate, and communicate exploitable vulnerabilities across DKB’s digital banking products, cloud platforms, APIs, and internal systems. In this high impact role you will run redteam engagements, shape remediation priorities, and help establish a scalable offensive security capability that protects millions of customers.

Responsibilities

• Plan and execute AI-assisted red team engagements across web applications, APIs, cloud workloads and infrastructure, and deliver prioritized technical reports and executive summaries.
• Provide clear remediation guidance and validate fixes, prioritizing critical and high findings.
• Configure, tune and maintain offensive tooling and develop automation playbooks that reduce manual triage and false positives.
• Integrate recurring security checks into CI/CD pipelines and platform processes to enable continuous testing and attack-surface reduction.
• Run remediation workshops and knowledge transfers, and produce reusable runbooks for product and platform teams.
• Coordinate triage and handoff with SOC, IT Ops, product teams and central IT Security, and support governance and compliance mapping (OWASP, API Security Top 10, CVSS).

Qualifications

• Proven hands on experience in red team or offensive security testing across web apps, APIs, and cloud environments.
• Solid understanding of OWASP Top 10, API Security Top 10, CVSS, secure SDLC, threat modeling.
• Experience with AI assisted offensive tooling or demonstrable integration of ML/NLP techniques into offensive workflows (e.g., Mythos, GPT Cyber).
• Strong practical experience with Burp Suite, OWASP ZAP, Nmap, Metasploit, Nessus/OpenVAS, and Kali Linux.
• Solid cloud security knowledge, particularly AWS, and experience with Kubernetes and container security.
• Scripting and automation skills (Python, Bash) and experience integrating security checks in Git/GitLab CI or equivalent CI systems.
• Excellent written and verbal communication skills in English.
• Experience with SIEM/logging platforms, OpenSearch, Grafana, or production monitoring stacks and prior experience in financial services or regulated environments are a plus.

Consideration

Got the feeling not to match every single requirement? Don’t worry! We encourage you to apply anyways, even if your qualifications do not align perfectly. You might still be just the right candidate for us!

Culture & Benefits

From Morning Daily to Afterwork Drink, team spirit is essential to us. The heart of our togetherness is that we truly are connected with each other: We not only share fun & laughter, but also honest opinions - because that’s how we grow: We exchange ideas, give support in our personal development, and celebrate success together! Besides our great community, we also offer numerous other benefits.