Senior Purple Team Security Engineer - Offensive/Defensive Testing

Standard Chartered; Warszawa; Hybride; PLN 180 000 - 300 000; Plein temps

Avantages offerts par ce poste

Flexible working options

Wellbeing support platform

Continuous learning culture

Inclusive and diverse culture

Résumé du poste

Standard Chartered is seeking a Senior Security Tester for its Purple Team group. The role focuses on offensive and defensive cyber security testing, supporting adversary emulations, and aligning testing with bank policies and risk appetite.

You will work with cross-border teams in a fast-paced environment, bring hands-on experience in penetration testing, and leverage frameworks like MITRE ATT&CK to strengthen vulnerability management and threat detection capabilities.

Qualifications

• Hands-on security testing across networks, web apps, and mobile.
• Experience with red/purple teaming and vulnerability management.
• Knowledge of MITRE ATT&CK, CBEST, and threat actor behaviors.
• Strong analytical and problem-solving skills with cross-border collaboration.

Responsabilités

• Define and maintain purple team collaboration framework.
• Design and implement secure rollout of new products/services.
• Review QA processes for third-party engagements for regulatory purposes.
• Provide risk-based mitigations for vulnerabilities found; support purple team exercises.
• Contribute to purple team methodology and tooling development.
• Ensure testing aligns with bank policies and engagement scope.

Connaissances

Penetration testing

MITRE ATT&CK

Threat actor TTPs

C/C++

Python

Description du poste

Standard Chartered is seeking a Senior Security Tester for its Purple Team group. The role focuses on offensive and defensive cyber security testing, supporting adversary emulations, and aligning testing with bank policies and risk appetite.

You will work with cross-border teams in a fast-paced environment, bring hands-on experience in penetration testing, and leverage frameworks like MITRE ATT&CK to strengthen vulnerability management and threat detection capabilities.