IT Security Officer (Penetration Testing)

About the role

The IT Security Officer will help protect the bank’s information systems by identifying and mitigating security vulnerabilities. You will work under senior staff to perform penetration tests on web, mobile, and network assets and contribute to the overall security posture.

Key responsibilities

• Assist senior team members in conducting penetration tests on web applications, mobile applications, and internal/external network infrastructure.
• Utilize automated scanning tools such as Nessus, OpenVAS, and Nmap to discover known vulnerabilities and perform initial analysis.
• Stay up‑to‑date with the latest cyber threats, attack vectors, and frameworks like OWASP Top 10.
• Collaborate with IT and development teams to explain findings, validate remediation, and ensure timely closure.
• Apply standard testing methodologies (e.g., PTES, OSSTMM) under supervision.
• Support project reporting, audit information provision, and compliance with bank regulations and risk‑control guidelines.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology or related field, or equivalent practical experience.
• Basic understanding of web application architecture and common vulnerabilities (SQL Injection, XSS, CSRF).
• Experience with a scripting language such as Python, Bash, or PowerShell.
• Hands‑on experience with security tools from school projects, home labs, or internships.
• Strong analytical, problem‑solving and written communication skills.
• Entry‑level security certifications (e.g., CompTIA PenTest+, eJPT, CEH) or progress toward them.
• Active participation in CTF platforms (TryHackMe, Hack The Box) and a personal home lab for security research.

Required skills

• Nessus
• OpenVAS
• Nmap
• Python
• Bash
• PowerShell
• PTES methodology
• OSSTMM methodology
• OWASP Top 10 knowledge
• SQL Injection
• Cross‑Site Scripting (XSS)
• Cross‑Site Request Forgery (CSRF)