Job purpose

• penetration testers examine the published services and internal applications for weaknesses and security issues.
• Pentester simulate exploits and attacks using a variety of tools during test.
• Their goal is to identify applications’ vulnerabilities and assess the effects of such breaches.
• After examining these vulnerabilities, dangers, and mitigation methods, they write extensive reports and provide mitigation recommendations.

Key accountabilities

• Scope, perform and operate a hands-on role involving penetration testing of web, mobile and desktop applications.
• Develop and maintain security testing plans to find and exploit code flaws, misconfigurations, and insecure software.
• Automate penetration and other security testing on the applications.
• Develop meaningful metrics to reflect the true posture of the environment allowing the bank to make educated decisions based on risk.
• Write clear, concise, actionable, threat-based, penetration testing reports for testing results detailing findings and recommendations.
• Consult with application developers and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation.
• Identify and assess vulnerabilities in applications, utilizing manual and automated testing methods.
• Keep cybersecurity training and knowledge current and up-to date by monitoring the latest security threats, vulnerabilities, trends, and practices.

Education

• Bachelor’s degree in IT or computer Science, or the equivalent combination of education.

Knowledge

• Thorough and practical knowledge of OWASP
• Good understanding and knowledge of codes languages and knowledge of modifying and compiling exploit code
• Have professional certifications such as CEH, OSCP, eWPT

Experience:

• 1-4 years of related technical experience.
• Experience within Banking Industry will be considered as an asset.