Senior Banking Penetration Tester

ITDS; Województwo mazowieckie; A distancia; PLN 303.000 - 1.815.000; Jornada completa

Descripción de la vacante

ITDS in Warsaw invites a Senior Banking Penetration Tester to strengthen client security through audit-grade testing and intelligent automation. You will design and execute tests for applications, systems, and infrastructure, identify vulnerabilities, automate detection, and document results for stakeholders.

Ideal candidates have 5+ years in security testing, knowledge of OWASP, MITRE ATT&CK, CVSS, and hands-on experience with Burp Suite, Nessus, Nmap, Metasploit, OpenVAS, and Mimikatz.

Formación

• 5+ years of hands-on security or penetration testing experience.
• Proficient with OWASP, MITRE ATT&CK, and CVSS.
• Practical experience with industry-standard testing tools listed above.
• Ability to prepare audits and present findings clearly.

Responsabilidades

• Design and execute security tests for applications, systems, and IT infrastructure.
• Identify vulnerabilities and weaknesses affecting security posture.
• Validate the effectiveness of security controls across environments.
• Document testing results clearly and consistently.
• Develop automation scripts to detect vulnerabilities and analyze configurations.
• Analyse and optimize security testing tools for efficiency.
• Prepare and deliver training on security testing and best practices.
• Provide expertise and promote cybersecurity practices across teams.

Conocimientos

Penetration testing

Security testing

Automation scripting

Windows

Reports & presentations

Herramientas

Burp Suite

Nessus

Nmap

Metasploit

OpenVAS

Wireshark

Cobalt Strike

Rubeus

SharpUp

Mimikatz

Descripción del empleo

Uncover critical vulnerabilities and strengthen banking security through high-impact penetration testing and intelligent automation!

Warsaw-based opportunity with a fully remote work model. As a Senior Banking Penetration Tester, you will be working for our client in the banking industry, helping strengthen application, system, and infrastructure security. You will deliver audit-grade security testing, develop automation tools, validate security controls, and support teams through training and cybersecurity best practices. The role requires an estimated commitment of approximately 50–300 hours per year.

Your main responsibilities:

• Design and execute security tests for applications, systems, and IT infrastructure.
• Identify vulnerabilities and weaknesses affecting the client’s IT security posture.
• Validate the effectiveness of security controls across IT environments.
• Document security testing results clearly and consistently.
• Build and develop scripts to automate vulnerability detection and configuration analysis.
• Analyse and optimise the effectiveness of security testing tools.
• Prepare and deliver training on security testing and vulnerability identification.
• Provide subject-matter expertise and promote cybersecurity best practices across teams.

You're ideal for this role if you have:

• At least 5 years of hands-on experience in security testing or penetration testing.
• Practical knowledge of OWASP, MITRE ATT&CK, and CVSS.
• Experience with Burp Suite, Nessus, Nmap, Metasploit, OpenVAS, and Wireshark.
• Experience with Cobalt Strike, Silver, Havoc, Mythic, GhostPack tools such as Rubeus and SharpUp, and Mimikatz.
• Programming and automation skills in Python, PowerShell, and Bash.
• Knowledge of Windows, Linux, Active Directory, and cloud technologies.
• The ability to prepare technical reports and present security testing results to stakeholders.

It is a strong plus if you have:

• Security certifications such as OSCP, OSWE, CEH, GPEN, or CISSP.

Language Required for the role: Polish and communicative English. Eligibility for the role: Only candidates with an existing legal right to work in Europe will be considered for this role.