Pentester (m/f)

BNP Paribas Bank Polska S.A. is part of the BNP Paribas banking group present in 64 countries with a 200-year tradition. The Security Testing (COE) team coordinates and manages security testing processes for key bank technologies and systems.

• Experience in cybersecurity, penetration testing, or IT security audits, especially in testing web and mobile applications.
• Knowledge of network security, Linux and Windows systems, and applications.
• Knowledge of operational digital resilience testing as described in the EU regulation DORA and related implementing acts.
• Creative and analytical thinking skills, good work organization, and engagement.
• Communication skills, readiness for continuous development, engagement, and independence.
• English language proficiency enabling fluent oral and written communication.
• Higher education, preferably in IT or related fields.

Nice to have:

• Knowledge of cloud security and microcontainerization.
• Knowledge of DevSecOps methodology and secure software development.
• Experience with IT security tools (IPS/IDS, DLP, SIEM, WAF, DAM, AV, firewall).
• Knowledge of security standards and best practices such as ISO/IEC 27001 and NIST Cybersecurity Framework.
• Experience in managing projects or software PoCs.
• Industry certifications in IT security (CISSP, CEH, OSCP, OSWP, GPEN, CISA, CISM, etc.).

• Realizing security tests for key bank technologies and systems.
• Performing penetration tests of web applications, mobile applications, IT infrastructure, and cloud solutions.
• Conducting Red Teaming simulations, social engineering tests, and physical security tests.
• Verifying the effectiveness of defense mechanisms and identifying and responding to cyber threats.
• Participating in tests and analyses of the implementation possibilities of the latest technologies in the bank, especially in cybersecurity.
• Participating in IT system security configuration reviews.
• Identifying, analyzing, and assessing risks for the IT environment and defining possible improvements.
• Preparing analyses, reports, and guidelines regarding the security of the IT environment.