Expert Penetration Tester – Web, API & Cloud Security

Nordea; Województwo pomorskie; Hybrid; PLN 180,000 - 280,000; Full time

Job summary

Nordea is seeking an Expert Security PenTester to join our Cyber Security team in Poland. Based in Gdańsk or Warsaw, you will lead tests across web apps, APIs, infrastructure and cloud, applying a risk-based mindset to identify and validate vulnerabilities.

You will produce high-quality reports, communicate findings to technical and non-technical stakeholders, and help develop testing methods and tools to strengthen the bank's security posture.

Qualifications

• 3+ years hands-on experience in penetration testing, red teaming.
• Strong knowledge of penetration testing tools such as Burp Suite, Metasploit, Nmap, Wireshark, BloodHound.
• Good understanding of Windows and Linux operating systems, including scripting in PowerShell and Bash.
• Solid knowledge of networking concepts.
• Familiarity with OWASP Top 10 and MITRE ATT&CK.
• Specialization in at least two areas: Web app security, AI based testing, Infrastructure testing, Cloud security, Reverse engineering, Secure code review.
• Ability to explain complex technical issues clearly.

Responsibilities

• Lead penetration tests of web applications, APIs, infrastructure, and cloud-based solutions used across the bank.
• Perform in-depth vulnerability assessments, exploit validation, and security reviews with a risk-based mindset.
• Prepare high-quality security testing reports and present technical findings to both technical and non-technical stakeholders.
• Support the development of testing methods, tools, and team knowledge.

Skills

Penetration testing

Red teaming

Burp Suite

Metasploit

Nmap

Wireshark

BloodHound

Windows

Linux

PowerShell

Bash

Networking

OWASP Top 10

MITRE ATT&CK

Web security

AI based testing

Infrastructure testing

Cloud security

Reverse engineering

Secure code review

Java

Python

C

C#

OSCP

OSWE

OSEP

OSED

GPEN

GXPN

WAPT

WAPTX

Security+

CEH

CRTP/CRTE

Tools

Burp Suite

Metasploit

Nmap

Wireshark

BloodHound

Job description

Nordea is seeking an Expert Security PenTester to join our Cyber Security team in Poland. Based in Gdańsk or Warsaw, you will lead tests across web apps, APIs, infrastructure and cloud, applying a risk-based mindset to identify and validate vulnerabilities.

You will produce high-quality reports, communicate findings to technical and non-technical stakeholders, and help develop testing methods and tools to strengthen the bank's security posture.