Pentester Findings & Cyber Security Analyst

Just Vargas; Porto; Presencial; EUR 55 000 - 75 000; Tempo integral

Resumo da oferta

Just Vargas is recruiting a Pentester Findings & Cyber Security Analyst for a key client in the financial sector in Porto. The role focuses on reviewing, validating, and prioritising penetration testing findings while ensuring compliance with BAIT, EBA, DORA, and TIBER-EU standards.

Ideal candidates bring 3+ years of hands-on experience in security assessments, strong knowledge of OWASP Top 10, and a practical background in regulated environments.

Qualificações

• 3+ years hands-on experience in pen testing, security assessments, red teaming, or related areas.
• Experience with regulated financial environments and relevant cybersecurity frameworks (BAIT, EBA, DORA, TIBER).
• Ability to reproduce findings and validate remediation measures.

Responsabilidades

• Review and validate findings from penetration tests for accuracy and alignment with security standards.
• Assess severity, relevance, and reproducibility of vulnerabilities.
• Suggest remediation strategies and support stakeholders in understanding findings.
• Collaborate with owners, testers, and security teams through remediation lifecycle.
• Contribute to governance and enhancement of testing frameworks.

Conhecimentos

Penetration testing

Security assessments

OWASP Top 10

SANS Top 25

JIRA

Red teaming

Formação académica

Background in Information Security or Computer Science

Ferramentas

Vulnerability management platforms

Descrição da oferta de emprego

Pentester Findings & Cyber Security Analyst

About the job Pentester Findings & Cyber Security Analyst

Just Vargas is a human resources consultancy that recruits, trains, accompanies, challenges, and encourages candidates and companies to make the best use of their talents.

We are currently looking for aPentester Findings & Cyber Security Analystfor a reference client in the Financial Sector.

Key Responsibilities:

• Review, analyse, and validate findings from penetration testing reports, ensuring technical accuracy, plausibility, and alignment with internal security standards;
• Assess the severity, relevance, and reproducibility of identified vulnerabilities;
• Request technical clarifications from penetration testers and system owners where required;
• Evaluate and validate proposed remediation measures, ensuring they effectively address identified vulnerabilities before closure;
• Support engineering, operations, and business stakeholders in interpreting penetration testing findings and remediation recommendations;
• Advise engineering and operations teams on appropriate mitigation and remediation strategies;
• Review extension requests for open penetration testing findings, assessing business justification and associated risk;
• Collaborate closely with system owners, penetration testers, security operations teams, and risk stakeholders throughout the remediation lifecycle;
• Provide clear, constructive feedback on remediation quality and implementation;
• Contribute to the continuous improvement of the enterprise-wide penetration testing framework and associated governance processes;
• Ensure penetration testing activities and remediation processes remain aligned with internal security standards and regulatory requirements, including BAIT, EBA, DORA, and TIBER-EU;
• Help strengthen the organisation's cybersecurity posture by identifying and mitigating security vulnerabilities across the organisation and its international subsidiaries.

Requirments:

• Minimum of 3 years' hands-on experience in penetration testing, security assessments, red teaming, application security, infrastructure security, or secure software development;
• Strong understanding of common vulnerability classes, including the OWASP Top 10 and SANS Top 25;
• Practical experience working within regulated financial environments and applying cybersecurity frameworks such as BAIT, EBA ICT & Security Guidelines, DORA, and TIBER-EU/TIBER-DE;
• Proven ability to reproduce security findings and technically validate remediation measures;
• Experience reviewing penetration testing reports and working with vulnerability management platforms and ticketing systems (e.g., JIRA);
• Background in Information Security, Infrastructure, Software Engineering, Computer Science, or a related technical discipline;
• Strong analytical and problem-solving skills with excellent attention to detail;
• Excellent communication and stakeholder management skills, with the ability to engage effectively with both technical and non-technical audiences;
• Structured, solution-oriented, and quality-focused approach to work;