Senior Penetration Tester

ING Group; Katowice; On-site; PLN 180,000 - 240,000; Full time

Job summary

A major financial services firm in Poland is seeking an experienced penetration tester to join its Offensive Security Center. The ideal candidate will have hands-on experience in penetration testing, proficiency in essential tools like Burp Suite and Nmap, along with strong analytical skills and relevant certifications. Responsibilities include conducting comprehensive tests, mentoring junior staff, and collaborating across teams to enhance security. This role is part of a strategic initiative focused on proactive security management in a modern, international environment.

Qualifications

• Several years of hands-on experience in penetration testing and vulnerability assessment.
• Fluent in English (B2/C1 level).
• Possess relevant hands-on certifications like eWPTX, OSWE, OSEP.

Responsibilities

• Conduct comprehensive penetration tests on applications, infrastructure, and systems.
• Evaluate and report on the risk of identified vulnerabilities.
• Support the implementation of IT security requirements across projects.
• Collaborate with teams to improve security posture.
• Mentor junior penetration testers.

Skills

Penetration testing experience

Proficiency in penetration testing tools

Knowledge of programming languages

Analytical problem-solving skills

Hands-on security certifications

Education

Higher technical education in Information Technology

Tools

Burp Suite

Nmap

Ghidra

IDA

Frida

Job description

The expected salary for this position: 13000 - 25000 PLN

The financial ranges specified in the announcement are adjusted and may differ from the range specified in the remuneration regulations.

ING Hubs Poland is hiring!

We are looking for you if you:

• have several years of hands‑on experience in penetration testing and vulnerability assessment,
• be proficient in various penetration testing tools and methodologies such as Burp Suite, Nmap, Ghidra, IDA, Frida, and others,
• have good knowledge of programming and scripting languages,
• possess strong analytical and problem‑solving skills to identify and exploit vulnerabilities,
• hold relevant hands‑on certifications (e.g., eWPTX, OSWE, OSEP, BSCP, CPTS and others).

English level: Communicate fluently in English (B2/C1 level)

You’ll get extra points for:

• knowledge of advanced persistent threats (APTs) and modern attack techniques,
• experience with cloud security and testing cloud environments,
• contributions to the cybersecurity community (e.g., published research, registered CVEs, conference presentations),
• higher technical education, preferably in Information Technology,
• holding additional security certifications (e.g., CISSP, CISA, CISM and others),
• experience working in an international environment.

Your responsibilities:

• conduct comprehensive penetration tests on applications, infrastructure, and systems,
• evaluate and report on the risk of identified vulnerabilities, providing actionable remediation guidance,
• support the implementation of IT security requirements and standards across projects,
• collaborate with development and infrastructure teams to improve security posture,
• mentor and support junior penetration testers and other team members,
• contribute to the development and refinement of internal testing methodologies and tools,
• stay up to date with emerging threats, tools, and techniques in offensive security.

Information about the squad:

As a member of our global CISO, you will join the Offensive Security Center of Expertise (CoE) with 40 pentesters (divided into 3 squads), which plays a key role in proactively identifying security risks across the organization. This is a strategic initiative for the company, focused on enhancing cyber resilience through advanced penetration testing and red teaming. You will work in a modern, international environment with access to the latest tools and technologies. The role naming convention in the global ING job architecture will be “Engineer IV”.