Senior Banking Penetration Tester

ITDS; United States; Remote; USD 83,000 - 179,000; Full time

Job summary

ITDS Business Consultants seeks a Senior Banking Penetration Tester to bolster the security of a banking client. The role is Warsaw-based with a fully remote model and requires an estimated 50–300 hours per year.

You will design, execute and document security tests across applications, systems and infrastructure, and develop automation tools while training teams in cyber best practices.

Qualifications

• At least 5 years of hands-on security testing experience.
• Familiarity with OWASP, MITRE ATT&CK, CVSS.
• Ability to develop automation scripts in Python, PowerShell, and Bash.
• Experience presenting findings to stakeholders.

Responsibilities

• Design and execute security tests for applications, systems, and IT infrastructure.
• Identify vulnerabilities and weaknesses affecting the client’s IT security posture.
• Validate the effectiveness of security controls across IT environments.
• Document security testing results clearly and consistently.
• Build and develop scripts to automate vulnerability detection and configuration analysis.
• Analyse and optimise the effectiveness of security testing tools.
• Prepare and deliver training on security testing and vulnerability identification.
• Provide subject-matter expertise and promote cybersecurity best practices across teams.

Skills

Penetration testing

Security auditing

Python scripting

PowerShell scripting

Linux

Windows security

Cloud security

Tools

Burp Suite

Nessus

Nmap

Metasploit

OpenVAS

Wireshark

Cobalt Strike

Mimikatz

Job description

Uncover critical vulnerabilities and strengthen banking security through high-impact penetration testing and intelligent automation!

Warsaw-based opportunity with a fully remote work model.

As a Senior Banking Penetration Tester, you will be working for our client in the banking industry, helping strengthen application, system, and infrastructure security. You will deliver audit-grade security testing, develop automation tools, validate security controls, and support teams through training and cybersecurity best practices. The role requires an estimated commitment of approximately 50–300 hours per year.

Your main responsibilities:

• Design and execute security tests for applications, systems, and IT infrastructure.
• Identify vulnerabilities and weaknesses affecting the client’s IT security posture.
• Validate the effectiveness of security controls across IT environments.
• Document security testing results clearly and consistently.
• Build and develop scripts to automate vulnerability detection and configuration analysis.
• Analyse and optimise the effectiveness of security testing tools.
• Prepare and deliver training on security testing and vulnerability identification.
• Provide subject-matter expertise and promote cybersecurity best practices across teams.

You're ideal for this role if you have:

• At least 5 years of hands‑on experience in security testing or penetration testing.
• Practical knowledge of OWASP, MITRE ATT&CK, and CVSS.
• Experience with Burp Suite, Nessus, Nmap, Metasploit, OpenVAS, and Wireshark.
• Experience with Cobalt Strike, Silver, Havoc, Mythic, GhostPack tools such as Rubeus and SharpUp, and Mimikatz.
• Programming and automation skills in Python, PowerShell, and Bash.
• Knowledge of Windows, Linux, Active Directory, and cloud technologies.
• The ability to prepare technical reports and present security testing results to stakeholders.

It is a strong plus if you have:

• Security certifications such as OSCP, OSWE, CEH, GPEN, or CISSP.

Language Required for the role:

Polish and communicative English.

Eligibility for the role:

Only candidates with an existing legal right to work in Europe will be considered for this role.