IT Security Penetration Tester

Jit Team is a Polish IT company employing over 770 experts and delivering innovative IT solutions globally. It has a long-standing partnership with a leading Nordic financial group, supporting over 200 personnel on more than 60 projects. The client's culture emphasizes work-life balance and an international environment with frequent English communication.

• Strong knowledge of IT Security Architecture
• Hands-on experience with Threat Modeling for AI agents, Machine Learning systems, and Large Language Models (LLMs)
• Deep understanding of AI-specific attack vectors and threat landscapes
• Practical experience with threat modeling methodologies including STRIDE, Attack Trees, and Cyber Kill Chains
• Experience creating and maintaining reusable threat models and threat libraries
• Ability to map threats to security controls, security requirements, and remediation actions
• Experience conducting threat modeling workshops with cross-functional teams
• Fluent in English

Nice to have:

• Experience in financial services or highly regulated environments
• Ability to translate technical threats into business risks and communicate to non-technical stakeholders
• Knowledge of OWASP Top 10 for Large Language Model Applications (OWASP LLM Top 10)
• Knowledge of MITRE ATLAS
• Familiarity with secure AI development practices and AI governance frameworks

• Conduct threat modeling workshops with application and platform teams
• Perform application-level security assessments on AI-enabled systems, ML solutions, and LLM-based applications
• Identify assets, trust boundaries, attack surfaces, threat actors, abuse cases, threats, and security risks related to Mythos scenarios
• Map relevant Mythos threat scenarios to business and technical architectures
• Develop, maintain, and continuously improve threat models using approved methodologies and tooling
• Review solution designs, architecture documentation, and technical specifications to validate threat coverage
• Collaborate with development, architecture, and security teams to define mitigation actions and security requirements
• Assess security exposures and recommend appropriate controls and remediation strategies
• Develop reusable threat models, threat libraries, and security patterns
• Track, document, and report identified threats, risks, mitigations, and remediation status
• Support security governance activities and contribute to secure-by-design initiatives

This position is a part-time engagement requiring approximately 8 hours per week. Work model is remote or hybrid from Gdynia, Gdańsk, Warsaw, or Lodz.