Remote Senior Banking Penetration Tester

ITDS; Województwo mazowieckie; Remote; PLN 303,000 - 1,815,000; Full time

Job summary

ITDS in Warsaw invites a Senior Banking Penetration Tester to strengthen client security through audit-grade testing and intelligent automation. You will design and execute tests for applications, systems, and infrastructure, identify vulnerabilities, automate detection, and document results for stakeholders.

Ideal candidates have 5+ years in security testing, knowledge of OWASP, MITRE ATT&CK, CVSS, and hands-on experience with Burp Suite, Nessus, Nmap, Metasploit, OpenVAS, and Mimikatz.

Qualifications

• 5+ years of hands-on security or penetration testing experience.
• Proficient with OWASP, MITRE ATT&CK, and CVSS.
• Practical experience with industry-standard testing tools listed above.
• Ability to prepare audits and present findings clearly.

Responsibilities

• Design and execute security tests for applications, systems, and IT infrastructure.
• Identify vulnerabilities and weaknesses affecting security posture.
• Validate the effectiveness of security controls across environments.
• Document testing results clearly and consistently.
• Develop automation scripts to detect vulnerabilities and analyze configurations.
• Analyse and optimize security testing tools for efficiency.
• Prepare and deliver training on security testing and best practices.
• Provide expertise and promote cybersecurity practices across teams.

Skills

Penetration testing

Security testing

Automation scripting

Windows

Reports & presentations

Tools

Burp Suite

Nessus

Nmap

Metasploit

OpenVAS

Wireshark

Cobalt Strike

Rubeus

SharpUp

Mimikatz

Job description

ITDS in Warsaw invites a Senior Banking Penetration Tester to strengthen client security through audit-grade testing and intelligent automation. You will design and execute tests for applications, systems, and infrastructure, identify vulnerabilities, automate detection, and document results for stakeholders.

Ideal candidates have 5+ years in security testing, knowledge of OWASP, MITRE ATT&CK, CVSS, and hands-on experience with Burp Suite, Nessus, Nmap, Metasploit, OpenVAS, and Mimikatz.