IT Security Penetration Tester

Jit Team; Warszawa, Gdynia; On-site; PLN 83,000 - 124,000; Part time

Job summary

Jit Team is seeking an experienced IT Security Penetration Tester to join a strategic financial services initiative in Warsaw. This part-time role (~8 hours/week) focuses on AI-related threats, threat modeling, and secure-by-design practices across AI-enabled systems and LLM-based applications.

The candidate will conduct threat modeling workshops, map threats to architectures, and collaborate with security and engineering teams to implement effective mitigations. Fluent English is required.

Qualifications

• Strong knowledge of IT Security Architecture.
• Hands-on experience with Threat Modeling for AI agents, ML systems, and LLMs.
• Deep understanding of AI-specific attack vectors and threat landscapes.
• Experience with STRIDE, Attack Trees, Cyber Kill Chains.
• Experience creating reusable threat models and libraries.
• Ability to map threats to controls, requirements and remediation actions.
• Experience conducting threat modeling workshops with cross-functional teams.
• Fluent English.

Responsibilities

• Conduct threat modeling workshops with application and platform teams.
• Perform application-level security assessments focused on AI-enabled systems, ML solutions, LLM-based applications, and related services.
• Identify assets, trust boundaries, attack surfaces, threat actors, abuse cases, threats, and security risks related to Mythos scenarios.
• Map relevant Mythos threat scenarios to business and technical architectures.
• Develop, maintain, and continuously improve threat models using approved threat modeling methodologies and tooling.
• Review solution designs, architecture documentation, and technical specifications to validate threat coverage.
• Collaborate with development, architecture, and security teams to define mitigation actions and security requirements.
• Assess security exposures and recommend appropriate controls and remediation strategies.
• Develop reusable threat models, threat libraries, and security patterns.
• Track, document, and report identified threats, risks, mitigations, and remediation status.
• Support security governance activities and contribute to secure-by-design initiatives.

Skills

IT Security Architecture

Threat Modeling (AI/ML/LLMs)

AI attack vectors

Threat modeling methodologies

Reusable threat models

Threat libraries

Security controls mapping

Threat modeling workshops

English fluency

Tools

Threat Modeling Tools

Mythos Adversary Framework

OWASP LLM Top 10

MITRE ATLAS

Job description

Why choose this offer?

Scandinavian organizational culture will provide you with work-life balance, you will gain time for additional training (financed by Jit)

• You can expect a flexible work organization
• The international work environment will give you the opportunity to interact with the English language on a daily basis
• The Jit community will bring you a nice time during regular integration meetings

Project

We are looking for an experienced IT Security Penetration Tester to join a strategic financial services initiative. The role requires a Subject Matter Expert (SME) with strong expertise in AI-related threats, AI-enabled applications, and the Mythos Level Adversary Framework.

You will be responsible for conducting application-level security assessments, identifying and analyzing potential threat scenarios, and mapping relevant Mythos threats to evaluate security exposures and support the implementation of effective mitigation strategies. The position involves close collaboration with architecture, engineering, and security teams to ensure security risks are identified and addressed throughout the solution lifecycle.

Please note:This position requires availability of approximately8 hours per weekand is offered as apart-time engagement.

Responsibilities you'll have

• Conduct threat modeling workshops with application and platform teams
• Perform application-level security assessments focused on AI-enabled systems, ML solutions, LLM-based applications, and related services
• Identify assets, trust boundaries, attack surfaces, threat actors, abuse cases, threats, and security risks related to Mythos scenarios
• Map relevant Mythos threat scenarios to business and technical architectures
• Develop, maintain, and continuously improve threat models using approved threat modeling methodologies and tooling
• Review solution designs, architecture documentation, and technical specifications to validate threat coverage
• Collaborate with development, architecture, and security teams to define mitigation actions and security requirements
• Assess security exposures and recommend appropriate controls and remediation strategies
• Develop reusable threat models, threat libraries, and security patterns
• Track, document, and report identified threats, risks, mitigations, and remediation status
• Support security governance activities and contribute to secure-by-design initiatives

Expected competences and knowledge

• Strong knowledge of IT Security Architecture
• Hands-on experience with Threat Modeling for AI agents, Machine Learning systems, and Large Language Models (LLMs)
• Deep understanding of AI-specific attack vectors and threat landscapes
• Practical experience with threat modeling methodologies such as:STRIDE, Attack Trees, Cyber Kill Chains
• Experience creating and maintaining reusable threat models and threat libraries
• Ability to map threats to security controls, security requirements, and remediation actions
• Experience conducting threat modeling workshops with cross-functional teams
• Fluent English

Nice-to-have

• Experience working within financial services or highly regulated environments
• Ability to translate technical threats into business risks and communicate them to non-technical stakeholders
• Knowledge of OWASP Top 10 for Large Language Model Applications (OWASP LLM Top 10)
• Knowledge of MITRE ATLAS
• Familiarity with secure AI development practices and AI governance frameworks

Technologies you'll work with

• AI Agents
• Large Language Models (LLMs)
• Machine Learning Platforms
• Threat Modeling Tools
• Mythos Adversary Framework
• OWASP LLM Top 10
• MITRE ATLAS
• Security Architecture Frameworks

Client – why choose this particular client from the Jit portfolio?

Jit Team has had an over-decade-long relationship with the leading financial group in the Nordic countries, and we are privileged to be our client's premier partner in Poland. At present, over 200 Jit personnel are engaged in the completion of more than 60 projects for this Norwegian major provider of financial services with a global presence and a strong focus on modern technology. Our customer's work atmosphere is epitomized by the Scandinavian culture, which is conducive to people who place emphasis on work-life balance and feedback culture. Furthermore, all projects are executed in international teams, giving constant exposure to the English language.

About Jit Team

The Human Factor of IT – it’s not just a slogan, it’s a philosophy. The foundation of Jit Team is people, which is why we prioritise you. We employ over 770 experienced experts, to whom we offer developmental projects, a wide range of benefits, and a proprietary professional development programme. Together with clients from around the world, we create innovative IT solutions delivered by highly specialised and efficient teams.

Behind our maxim are also charitable and educational activities. We support schools, universities, and educational institutions by conducting workshops, running educational projects, sponsoring events, and donating learning equipment. We offer internships that help launch careers in IT. We support water rescuers and hospitals by providing the necessary equipment. We also support numerous charitable organisations helping people in need, children, and the elderly. We are a Polish company and we share what we have achieved over more than 15 years of activity. By supporting local initiatives, we contribute to the circulation of good energy.